85
MAPPING THE EU ON LEGAL WHISTLEBLOWER PROTECTION ASSESSMENT BEFORE THE IMPLEMENTATION OF THE EU WHISTLEBLOWING DIRECTIVE

ASSESSMENT BEFORE THE IMPLEMENTATION OF THE EU

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

MAPPING THE EU ON LEGAL WHISTLEBLOWER PROTECTION ASSESSMENT BEFORE THE IMPLEMENTATION OF THE EU WHISTLEBLOWING DIRECTIVE

2

Transparency International is the global civil society organisation leading the fight against corruption. Through more than 100 chapters worldwide and an international secretariat in Berlin, Transparency International raises awareness of the damaging effects of corruption and works with partners in government, business and civil society to develop and implement effective measures to tackle it. Transparency International Nederland is the Dutch Chapter of Transparency International. Transparency International Nederland works with government, business and civil society to put effective measures in place to tackle corruption and promote integrity. This includes lobbying for better legislation to protect those who speak up against wrongdoings such as corruption and fraud. www.transparency.org www.transparency.nl

Copyright: 2019, Transparency International Nederland (TI-NL)

Date of issuance: April 2019

Language: English

This report is available for download on the website of TI-NL: www.transparency.nl

Research lead: Lotte Rooijendijk (Communications & Project Officer TI-NL)

Researcher: Linda Schut (former Project Officer TI-NL)

Expert input: representatives of involved TI-chapters

Review: Hannah de Jong (board member TI-NL) and Anne Scheltema Beduin (Executive Director TI-NL)

Every effort has been made to verify the accuracy of the information contained in this report. All information was believed

to be correct as of March 2019. Nevertheless, Transparency International Nederland cannot accept any responsibility or

legal liability for the accuracy and completeness of data, or for the consequences of its use for other purposes or in other

contexts.

3

TABLE OF CONTENTS MAIN FINDINGS ....................................................................................................................... 4

INTRODUCTION ....................................................................................................................... 6

METHODOLOGY ...................................................................................................................... 8

1. AUSTRIA ......................................................................................................................... 11

2. BELGIUM ......................................................................................................................... 14

3. BULGARIA ....................................................................................................................... 17

4. CROATIA ......................................................................................................................... 20

5. CYPRUS .......................................................................................................................... 22

6. CZECH REPUBLIC .......................................................................................................... 24

7. DENMARK ....................................................................................................................... 27

8. ESTONIA ......................................................................................................................... 30

9. FINLAND.......................................................................................................................... 33

10. FRANCE ....................................................................................................................... 35

11. GERMANY ................................................................................................................... 37

12. GREECE ...................................................................................................................... 40

13. HUNGARY ................................................................................................................... 42

14. IRELAND ...................................................................................................................... 44

15. ITALY ........................................................................................................................... 47

16. LATVIA ......................................................................................................................... 49

17. LITHUANIA ................................................................................................................... 50

18. LUXEMBOURG ............................................................................................................ 52

19. MALTA ......................................................................................................................... 54

20. THE NETHERLANDS ................................................................................................... 56

21. POLAND ....................................................................................................................... 58

22. PORTUGAL .................................................................................................................. 60

23. ROMANIA ..................................................................................................................... 62

24. SLOVAKIA .................................................................................................................... 64

25. SLOVENIA ................................................................................................................... 66

26. SPAIN .......................................................................................................................... 68

27. SWEDEN ...................................................................................................................... 70

28. UNITED KINGDOM (UK) .............................................................................................. 72

ANNEX 1 – TI PRINCIPLES FOR WHISTLEBLOWER LEGISLATION ................................... 74

ANNEX 2 – RATED RESEARCH FINDINGS .......................................................................... 76

ANNEX 3 – DESK RESEARCH REFERENCES ..................................................................... 77

ANNEX 4 – ACKNOWLEDGEMENTS .................................................................................... 85

4

MAIN FINDINGS At the time of this assessment there is no uniform legal framework to protect whistleblowers in the EU. Whistleblower protection legislation remains the exception rather than the rule within the EU. Most EU-member states do not have dedicated legislation in place, and even in the few countries where such laws do exist, they usually leave significant loopholes and fall short of good practice. However, this will change when the EU Directive on Whistleblowing Protection, that is currently being drafted, will enter into force. 1 This EU Directive affords much-needed harmonisation and will serve as a minimal standard for the implementation of whistleblowing legislation in EU member states. Transparency International Nederland (TI-NL) has been actively advocating for this Directive together with other TI-chapters and NGOs.2

Within more than half of the EU-member states (15 out of 28), there is no legal obligation for companies to implement an internal reporting mechanism.

In 8 EU-member states, the burden of proof in case of retaliation as a result of making a disclosure lies on the whistleblower.

Only 10 out of 28 EU-member states have legislation in place dedicated solely to protect whistleblowers.

Within more than half of the EU-member states (15 out of 28), there is no legal protection of whistleblowers available in both the public and private sector.

Only 8 out of 28 EU-member states include sanctions or penalties in case of reprisal for or interference with, a whistleblowers’ disclosure.

Still 3 EU-member states do not guarantee the protection of identity with confidentiality when making a disclosure.

Only 11 EU-member states offer the possibility to anonymously make a disclosure.

Final ranking Part of this research is the ranking of the legal framework of the assessed EU member states regarding their degree of whistleblower protection.3 The ranking per category is as follows:

WEAK PROTECTION MEDIUM PROTECTION STRONG PROTECTION Spain Hungary United Kingdom (UK) Bulgaria Sweden Malta Finland Slovakia Italy Greece The Netherlands Lithuania Ireland Austria France Czech Republic Latvia Poland Cyprus Denmark Belgium

1 Proposal for a ‘Directive of the European Parliament and of the Council on the protection of persons reporting on breaches of Union Law’, {SWD(2018) 116 Final} – {SWD(2018) 117 Final}: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A52018PC0218 2 Making whistleblowing work for Europe: https://www.transparency.nl/wp-content/uploads/2019/02/FINAL_Making_whistleblowing_work_for_Europe.pdf 3 In the methodology (p. 6) the ranking of the EU member states and the available categories are explained.

5

Germany Romania Portugal Estonia Luxembourg Slovenia Croatia

The above ranking shows that up until now EU member states have a patchwork of protection for those who wish to expose wrongdoing. Only very few countries have strong whistleblower legislation in place whereas most member states offer minimal protection for whistleblowers. As a result, European citizens remain largely unprotected in case they decide to speak up, causing them to face the risk of retaliation, judicial proceedings and dismissal. This, in turn, leaves suspected cases of fraud, corruption and other malpractice unattended – meaning that a huge potential to fight such practices is lost. Since wrongdoings such as corruption and fraud often cross borders and take place in several jurisdictions, we believe it is of the utmost importance that countries within the EU provide whistleblowers with a strong and uniform legal protection. So no matter who they are or where they work, will be protected.

6

INTRODUCTION Over the past few years, international scandals such as ‘Luxleaks’, ‘Dieselgate’, the ‘Panama Papers’ and the disclosures concerning ‘Cambridge Analytica’ show the great importance of whistleblowers in society. Without their disclosures, the illegal behaviour of the people and companies involved may have continued without being revealed. Even though whistleblowers are essential in the fight against corruption and other crimes, they often risk reprisals and retaliation for their disclosure. To invigorate the fight against corruption, a logical step would be to improve the protection of whistleblowers. In order to establish a sufficient degree of legal protection in the European member states, the European Commission (EC) proposed an EU-wide Directive on Whistleblower Protection in April 2018.4 First Vice-President of the EU, Frans Timmermans, explained why this legislation is necessary:

"Many recent scandals may never have come to light if insiders hadn't had the courage to speak out. But those who did took enormous risks. So if we better protect whistleblowers, we can better detect and prevent harm to the public interest such as fraud, corruption, corporate

tax avoidance or damage to people's health and the environment. There should be no punishment for doing the right thing. In addition, today's proposals also protect those who act

as sources for investigative journalists, helping to ensure that freedom of expression and freedom of the media are defended in Europe."5

TI-NL has long advocated for whistleblower protection and believes this is another step forward in efforts to ensure harmonised levels of protection for those reporting wrongdoing and corruption. For over a decade, Transparency International (TI) and others have researched the legal protection of whistleblowers. The underlying research aims to contribute to this knowledge by assessing the current legal frameworks of the 28 member states of the European Union (EU) and creating a practical guide. The outcome of this research mainly serves as the foundation of an online map, showing the degree of legal protection of whistleblowers per member state.6 The calculated degrees of the legal frameworks will range from ‘weak protection, to ‘medium protection’ and finally to ‘strong protection. The primary aim of this research is to assist (potential) whistleblowers in their decision whether or not to blow the whistle, by pointing out to which body their disclosure can be made, or to show whether it is possible to anonymously make a disclosure in a given member state. Since whistleblower cases are often quite complicated, we also advise people who want to speak up about potential wrongdoing to seek (legal) advice before blowing the whistle. Moreover, it serves as a baseline assessment before the implementation of the EU Directive on Whistleblower Protection. The degree of protection per member state will be re-assessed after the implementation of the EU Directive on Whistleblower Protection.

With regard to this research, please note that: • It is conducted between June 2018 and March 2019. Changes in relevant legislation after

that period are not taken into account. • It is limited to the 28 member states of the EU. • It only includes the main features of whistleblowing legislation. It does not offer exhaustive

information regarding every possible situation a whistleblower can face. Moreover, case law 4 Proposal for a ‘Directive of the European Parliament and of the Council on the protection of persons reporting on breaches of Union Law’, {SWD(2018) 116 Final} – {SWD(2018) 117 Final}: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A52018PC0218 5 See: http://europa.eu/rapid/press-release_IP-18-3441_en.htm (last accessed 11 October 2018). 6 See: https://www.transparency.nl/wat-wij-doen/corruptie-op-onderwerp/klokkenluiden/

7

is not taken into consideration. Therefore, it is recommended that whistleblowers always seek legal advice with regard to their case.

• It is primarily based on national legislation and regulations. However, in case this proved impossible due to language barriers, research is based on secondary documents and guidelines.7

• Reference is made to the translated names of the laws (to English) instead of the original names, to make sure the information is easily accessible for all whistleblowers. The abbreviations of the names of legislation are in accordance with the original names in the national language. For example, the Austrian civil code, the Allgemeines bürgerliches Gesetzbuch is – in this report – being referred to as the ‘Civil Code’ and abbreviated as ‘ABGB’.

• The overall findings and any unclarities in legislation and/or remaining questions have been shared and discussed with national experts from European chapters of Transparency International. All consulted national experts are listed in Annex 4 - Acknowledgements.

• Finally, it is important to keep in mind that this research and the online map focuses on the legislation that is dedicated to the protection of whistleblowers. Therefore, alternative laws that offer protection to whistleblowers (such as administrative, labour and criminal laws) are taken into account, but are not separately researched. Due to this limitation, the available alternatives can differ per member state (see disclaimer below).

Disclaimer The main goal of this study is the creation of an online EU-map on whistleblowing protection. With regard to the limited resources of TI-NL and the aim of this online map, we chose to focus on legislation that is specifically dedicated to the protection of whistleblowers. Our research is partially based on previous research and secondary documents. The underlying documents to the proposal for the ‘Directive of the European Parliament and of the Council on the protection of persons reporting on breaches of Union Law’ served as an important source as well. Since these documents contain the input of EU member states, it is possible that the information that is available – and therefore the content of the findings presented in this online map – differs (to some degree) per Member State. This is especially the case when it concerns the description of alternative legal routes for whistleblowers, such as contesting unfair dismissals based on labour law or disclosing criminal offences to the police. Please note that the absence of a description of such alternatives does not mean that these alternatives do not exist in a given Member State. In addition, the degree of protection described in this report may differ from the protection offered in practice. For example: private entities are always free to adapt more elaborate measures to assist whistleblowers than required by law. On the other hand, it is possible that the legislation prohibits retaliations in the workplace, but in practice retaliations are not sanctioned (resulting in a ‘higher’ degree of protection ‘on paper’ than in reality). Finally, please note that the online map is a ‘living instrument’. If additional information regarding the protection of whistleblowers should be taken into account, please contact TI-NL and let us know. In any case, the degree of protection per member state will be re-assessed after the implementation of the EU Directive on Whistleblower Protection.8

7 See for example Norton Rose Fulbright, ‘A global guide to whistleblowing laws’ (2014) and The World Law Group, ‘Global Guide to Whistleblowing Programs’ (2016). 8 Press release of the European Commission regarding the proposed new rules: http://europa.eu/rapid/press-release_IP-18-3441_en.htm (last accessed 13 November 2018).

8

METHODOLOGY This study is conducted in order to create an online guide for (potential) whistleblowers within the European Union, and is focused on: ‘what degree of protection is offered to whistleblowers, based on the legal frameworks of all 28 member states of the European Union?’ The term ‘degree’ refers to three categories (‘strong protection’, ‘medium protection’ or ‘weak protection’). In order to determine the level of protection, each member state has been analysed on the bases of sixteen different indicators regarding the legal protection of whistleblowers.9 The presence of each indicator refers to a set value, ranging from 3 to 25 points.10 Finally, the total number of points obtained by the (legal framework of the) member state will lead to 1 out of 3 categories, describing the degree of legal protection for whistleblowers.11 Therefore, the researched member states can be ranked based on the degree of protection their legal system offers to whistleblowers. Desk research This research is based on desk research. The documents consulted are presented in Annex 3 - Desk Research References, mainly consisting of reports of the European Union and Transparency International, and legislation and regulations of the EU member states. Furthermore, where possible, all findings have been reviewed by experts within the relevant national chapter of Transparency International or other specialists in the field of whistleblower protection in the EU member states.12 Due to the fact that this research is conducted on the basis of desk research, it is important to note that the degree of protection in this report may differ from the protection offered in practice. For example, it is possible that the legislation prohibits retaliations in the workplace as a result of the disclosure of a whistleblower, but in practice retaliations will not be sanctioned. Therefore, it is possible that the degree of protection ‘on paper’ is higher than the protection in reality. Analysed indicators In 2013, Transparency International issued the International Principles for Whistleblower Legislation. This guide presented the best practices for laws protecting and supporting whistleblowing in the public interest. 13 For this research, the principles of that guide are summarized and transformed into manageable indicators to be able to assess the protection offered by the legal framework of member states.14 All indicators used are traceable and the original principles can be found in Annex 1 - Principles for Whistleblower Legislation. For each indicator, a value is set that reflects the importance TI-NL has given to the specific indicator from the practical perspective of a whistleblower. Therefore, the presence of indicators such as the broad scope of protection against retribution, availability of reporting channels and a wide range of types of wrongdoings that can be disclosed by whistleblowers, reward the given legal framework with 10 points. The presence of other important indicators such as the involvement of multiple actors in the design and (periodic) review of the legislation, are rewarded with 3 points as these are of less great practical importance to whistleblowers.

9 An overview of the current member states of the European Union can be found via https://europa.eu/european-union/about-eu/countries_en (last accessed 4 November 2018). 10 All analysed indicators and the related values are listed below. 11 These categories are ‘weak protection, ‘medium protection’ and ‘strong protection. 12 All contacts are mentioned in Annex 4 ‘Acknowledgements’, per member state. 13 Via https://www.transparency.org/whatwedo/publication/international_principles_for_whistleblower_legislation (last accessed 12 October 2018). 14 See also, Mark Worth, Whistleblowing in Europe. Legal Protections for Whistleblowers in the EU (2013), p. 9.

9

The table below (table 1 - Indicators), sums up all indicators and their values. A comprehensive definition of the indicators can be found in Annex 1 - Principles for Whistleblower Legislation. INDICATOR REWARD IF PRESENT

1. Broad definition of whistleblowing 5 points 2. Broad definition of a whistleblower 5 points 3. Protection from retribution 10 points 4. Internal reporting mechanism 10 points 5. External reporting mechanism 10 points 6. Whistleblower participation 5 points 7. Rewards system 3 points 8. Protection of identity with confidentiality 10 points 9. Anonymous reports accepted 7 points 10. Whistleblowers authority 10 points 11. Right to a fair hearing 3 points 12. Full range of remedies 5 points 13. Penalties for retaliation 5 points 14. Involvement of multiple actors 3 points Extra 1. Stand-alone legislation 25 points Extra 2. Available in public and private sector 25 points

Table 1 - Indicators Calculation of the awarded points In order to calculate the final points and ranking per member state, all received points will be added up. Please note that points are not rewarded gradually but rather binary. For example, if the legal framework of country A offers a broad definition of the term ‘whistleblower’ in accordance with the methodology, the member state receives 10 points. If the legal framework of country B includes an even broader definition, it still receives 10 points. However, if the legal framework of country C contains a limited definition, and therefore not in accordance with the methodology, it receives no points at all.The maximum score that can be received based on the indicators 1 to 14 is 91 points. In addition to the assessment of the previous indicators, the final ranking of the member states is further based on two aspects, associated with the pursuit of TI-NL to raise the bar for the protection of whistleblowers in all member states. This relates to the continuing development of whistleblowing protection legislation. The first additional indicator concerns the presence of stand-alone legislation on whistleblowing since this emphasises the importance of whistleblower protection in EU member states. 15 A second additional indicator of special importance is legislation that offers protection to whistleblowers in both the public and the private sector. It is often the case that protection is only awarded in one sector, leaving a large proportion of the (working) population unprotected. The presence of both of these additional indicators allows member states 25 extra points per indicator. This means that the maximum number of points that can be obtained is 141.16 15 Stand-alone legislation is defined as “independent laws and/or regulations specifically with respect to whistleblowers, that functions without the need of other laws and/or regulations in order to address (the protection of) whistleblowers.” The existence of stand-alone legislation does not rule out the implementation of additional legislation regarding (the protection of) whistleblowers. 16 If all 14 indicators present, 108 points plus 50 for a stand-alone piece of legislation, applicable to both sectors.

10

Ranking categories The points obtained reflect a certain degree of protection offered by the national judicial system of a researched member state. In order to make this less abstract, the number of points can be translated into a specific ranking of the degree of protection. Legal frameworks can be ranked as ‘strong protection’, ‘medium protection’ or ‘weak protection. In the table below, the bandwidth per final ranking is determined and the degree of protection is generally described.

WEAK PROTECTION MEDIUM PROTECTION STRONG PROTECTION

0 – 47 Points 48 – 95 Points 96 - 141 Points

Table 2 - Ranking categories The bandwidth per ranking is calculated as follows. The maximum amount of points a member state can receive, based on the presence of the 16 indicators (14 general indicators plus 2 extra indicators) in the legal framework, is 141 points. Assuming that the legal framework of the member states can only qualify as ‘strong protection’ if (almost) all indicators are present and the protection is enclosed in stand-alone legislation and covers both the public and private sectors. In that case, the legal framework should obtain a score ranging between 96 and 141 points. Legal frameworks enter the bandwidth qualified as ‘medium protection’ if the awarded points range from 48 to 95 points. This means that the legal framework scored at least half or almost all of the possible points but did not implement stand-alone legislation, neither applies to both the private and public sector. Finally, the bandwidth regarding the weak protection category ranges from no indicators present (0 points) to just a few but not even half of all possible points obtained (with a maximum of 53 points). Report structure and design This report includes 28 chapters and the indicators are addressed per member state. The two most important indicators are discussed in the introduction of each chapter. In the context of creating a practical guide, the chapters are based on the fifteen indicators. It is important to note that the number of each indicator as given in this methodology (ranging from 1 to 14) does not fully correspond with the number of the indicator as used in the table in each chapter (ranging from 1 to 10). This is because; due to their coherence, indicators 4 (internal reporting mechanism) and 5 (external reporting mechanism) are assessed together, as well as indicators 8 (protection of confidentiality) and 9 (anonymous reports accepted). Indicators 6 (whistleblowers participation), 7 (availability of a rewards system), 11 (right to a fair hearing) and 14 (involvement of multiple actors) are mentioned together under the heading ‘Other relevant aspects’.

11

1. AUSTRIA COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Austria has no stand-alone legislation dedicated to protect whistleblowers.

• The protection that is available to whistleblowers is either based on specific sectors or on specific types of wrongdoing. For example, fragmented legislation exists concerning whistleblowing in the public sector and the financial sector, or concerning corruption or environmental harmful substances.17

• Other relevant laws are: the Public Service Law; the Civil Servants Act; the Private Employees Act; the Banking Act; the Environmental Information Act; the Stock Exchange Act; the Austrian Financial Market Authority; the Labour and Constitution Act; the Data Protection Act and the Civil Code (ABGB).

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law. 18

3. Who are protected? Depending on the legislation, protection is granted to: • Civil servants; • financial sector employees reporting on insider trading,

market manipulation, money laundering and financing of terrorism;

• all citizens reporting corruption via an online platform; and • employees in the private sector reporting on environmental

harmful substances.19 4. What types of

wrongdoing can be disclosed?

Disclosures can be made regarding certain types of wrongdoing, including: criminal acts liable for prosecution, breaches of public duty (by civil servants), financial crimes such as bribery, money laundering, insider trading, market manipulation and financing of terrorism, corruption and breaches of EU law regarding environmental harmful substances.20

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures made by whistleblowers.

• Specific disclosures can be made to: - The Federal Bureau of Anti-Corruption for disclosures

regarding corruption (‘FBAC’);21 - The Austrian Office of Prosecution for Economic Crime

and Corruption for the disclosure of economic crimes, through their website; and

17 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 138. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 18 Walter Greyer (TI Austria) defines a whistleblower as ‘a person who is an insider and who has knowledge about a criminal offence, but who is not part of the malversation and who can disclose information about the offence’, according to Shahanaz Müller, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country report: Austria (2012), p. 35. 19 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 138. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 20 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 136. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 21 If a report has been made to the FBAC and the disclosure does not fall within the scope of this authority, disclosures can be send to the national ombudsman office.

12

- The Public Prosecutors office, specifically for the disclosure of economic crimes and corruption.

6. How can wrongdoings be disclosed?

• In general, companies are not required to implement whistleblowing mechanisms. There is no general requirement to disclose internally before external disclosures can be made.

• In the financial sector, entities are required to implement disclosing procedures.22

• Employees can make external disclosures regarding corruption and white-collar crimes to a public channel.23

• Disclosures regarding environmental cases can be made to the Environmental Agency and Federal Ministries.24

7. What kind of protection does the law offer?

• There is no general protection mechanism concerning whistleblowers in place.

• Protection against workplace retaliation and interim relief procedures can be offered based on alternative legislation.

• The FBAC offers protection for all disclosed behaviour within the scope of the FBAC, meaning regarding economic crimes such as corruption and money laundering (§4 Section 1 BAK-G).

• Contracts that violate morality are null and void (§879 (1) ABGB). It can be possible to contest termination of a work contract (dismissal/suspension), for example due to whistleblowing, because of violating the basic principles of the society.25 However, it is unclear how this will work out in practice.

• In order to receive legal protection in any case, the disclosures are required to have been made in good faith.26

• There is no reversal of the burden of proof from the whistleblower to the employer.27

8. How is the identity of whistleblowers protected?

Confidentiality is guaranteed and reporting anonymously is not legally prohibited. With specific regard to external reporting in the financial sector, anonymous reporting is accepted by law.28

9. Does the law include remedies for whistleblowers?

The law does not offer specific remedies to whistleblowers that are harmed because of their disclosure.29 However, there is a general possibility to claim damages (section 29 of the Austrian White Collar Employees Act or section 84 of the Austrian Trade Code).30

22 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 137 See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 23 See: https://www.bkms-system.net/bkwebanon/report/clientInfo?cin=1at21&language=ger (last accessed 28 October 2018). 24 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p.137 See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 25 Shahanaz Müller, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country report: Austria (2012), p. 14. 26 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 137 See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 27 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 137 See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 28 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 138. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 29 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 137. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 30 Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 73.

13

10. Other relevant aspects • The law does not specifically entitle whistleblowers to a fair hearing. In general, whistleblowers can appeal dismissals or suspensions based on the labour law (articles 105 and 106 of the Austrian Labour Relations Act).

• The law does not offer specific whistleblower participation rights nor are procedural aspects regulated.31

• There is no reward system for whistleblowers in place. • There is no specific involvement of key stakeholders in the

design and/or periodic review of legislation dedicated to whistleblowers.

11. Final notes In the public sector, after a disclosure has been made internally, the supervisor immediately has to initiate an investigation and if necessary start disciplinary procedures. 32 If the complaint indicates a possible criminal act, the case has to be referred to the public prosecutor.33

31 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 137. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 32 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 137. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 33 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 137. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

14

2. BELGIUM COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Belgium has no stand-alone legislation dedicated to protect whistleblowers.

• Due to the governmental system in Belgium, a distinction exists between the Federal State and the Flemish Region.34 - Protection on the Federal State level is covered by The

Law on Integrity and Ethics (‘the Law’). - Protection in the Flemish Region is covered by the

Decree on Whistleblowers for the public sector (‘the Decree’)35 and the Protocol regarding the protection of whistleblowers (‘the Protocol’).36

• Other relevant laws are: the Law on the disclosure of a suspected violation of the integrity of the administrative authority by a staff member.37

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? • At the Federal State level, all employees active in the Federal Administration are covered by the Law. 38 At the Flemish regional level, all employees of the administrative authority that belongs to the Flemish region and Flemish speaking authorities in Brussels are covered by the Decree and Protocol.39

• The Flemish Ombudsman can receive staff members who report an irregularity, meaning a civil servant, trainee or contract staff member of the Belgium government who reports negligence, abuse or crime as mentioned in article 3 paragraph 2 of the Decree’ (article 1 Protocol, article 3 paragraph 2 of the Decree).

• The FSMA refers to persons reporting an actual or potential breach of the financial rules (article 2, sub 2 Decree 24 September 2017 regarding the FSMA).

4. What types of wrongdoing can be disclosed?

• The range of people that can make disclosures differs per sector and institute. The laws and regulations cover (both on the Federal and Flemish level) different types of wrongdoings that can be disclosed.

• In the Federal State: - All acts that constitute an infringement of legislation

that applies to public administrations and their personnel;

- acts that involve an unacceptable risks to life, health or the safety of persons or the environment; and

34 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 138. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 35 See: https://codex.vlaanderen.be/Portals/Codex/documenten/1006276.html (last accessed 11 October 2018). 36 See: http://www.vlaamseombudsdienst.be/ombs/nl/nieuws/pdf/20140509_klokkenluidersprotocol.pdf (last accessed 11 October 2018). 37 (Unofficial) translation: https://www.whistleblower-rights.org/s/Belgium-Public-Federal-Personnel-2013-English.doc (last accessed 22 January 2019). 38 Due to the system, this excludes employees in the Federal Police Corps, Ministerial Cabinets and the Parliament. 39 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 138. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

15

- all acts that (seriously) breach professional duties can be reported.40

• In the Flemish Region the acts of negligence, abuse and crime can be reported.41

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures made by whistleblowers.

• Specific disclosures can be made to: - The Ombudsman;42 - Audit Vlaanderen;43 - The Financial Services and Markets Authority (FSMA, for

the disclosure of breaches of financial legislation);44 - Trusted person in all federal administrative bodies;45 - The Social Security Intelligence and Investigation

Service;46 and - The Federal Police, reporting point Sporting Fraud.47

6. How can wrongdoings be disclosed?

• In general, companies are not required to implement whistleblowing mechanisms. There is no general requirement to disclose internally, before external disclosures can be made.

• External disclosures can be made to authorities such as the Federal Ombudsman, the Ombudsman Flanders and the Financial Services and Markets Authority.48

• On both levels, disclosure in good faith is required. In addition, on the Federal level it is also required to have reasonable belief that the disclosed information is true.49

7. What kind of protection does the law offer?

• On the Federal level, the law prohibits retaliation against a whistleblower.50 If retaliation or any discriminatory act does occur, a disclosure can be made to the Federal Ombudsman.51

• On the Flemish level, the law prohibits retaliation and sanctions against the whistleblower. During the protected period, the government cannot take measures and pending measures will be suspended temporarily (article 5 Protocol). The government employee can be replaced on request (article 7 Protocol).

40 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 139. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 41 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 139. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 42 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 139. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 43 See: https://www.auditvlaanderen.be/klokkenluiden (last accessed 15 November 2018). 44 (Procedural) rules regarding the FSMA are available in the Royal Decree of 24 September 2017. 45 Article3 of Chapter 3 Law on the report of a suspected violation of integrity of the administrative authority by a staff member requires the appointment of such a person, per linguistic role, 46 See: https://www.meldpuntsocialefraude.belgie.be/nl/index.html (last accessed 4 November 2018). 47 See: http://fraudefootball.be/index-nl.html (last accessed 4 November 2018). 48 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 139. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 49 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 140. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 50 The Law on Integrity and Ethics lists all (an extensive amount) protected types of retaliation. 51 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 139. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

16

• At both levels, the protection of the whistleblower lasts two years after the investigation is closed.52

• On both the Federal State level and the Flemish level, there is a reversal of the burden of proof from the employee to the employer.53

8. How is the identity of whistleblowers protected?

Confidentiality of the disclosure is guaranteed. The legal framework does not accept nor prohibit anonymous disclosures.54

9. Does the law include remedies for whistleblowers?

• The law does not offer specific remedies to whistleblowers harmed because of their disclosure. However, it is possible to seek remedies in alternative laws.

• On the other hand, the law includes sanctions including lifting protection, following a knowingly false disclosure (article 1, par. 3 Protocol) and qualifies such behaviour as a criminal act.

• On the Federal level, the employer can face a disciplinary procedure if the employer retaliates against a whistleblower,.55

10. Other relevant aspects • The legal framework does not offer specific rights regarding whistleblower participation, nor the right to a fair hearing.56 However, the Ombudsman can provide advice to the whistleblower.57

• There is no reward system for whistleblowers in place. • There is no specific involvement of key stakeholders in the

design and/or periodic review of legislation, dedicated to whistleblowers.

11. Final notes • An amendment of the Law on Integrity and Ethics is proposed in order to broaden the scope.58 In that case the Law will also apply to the Federal police.

• Wrongdoings on a Federal level need to be reported within 5 years; wrongdoing on a Flemish level within 1 year.59

• Audit Vlaanderen can also start an investigation into disclosed irregularities. However, no protection will be granted to the reporter. Nevertheless, the name of the reporter will not be disclosed to the public.60

52 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 139. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 53 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 139. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 54 OECD, Committing to Effective Whistleblower Protection (2016), p. 6. 55 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 139 – 140. 56 Furthermore, the balancing of competing rights for the whistleblower is not mentioned in Belgian legislation according to Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 140. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 57 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 140. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 58 See http://www.lachambre.be/FLWB/PDF/54/2324/54K2324001.pdf (last accessed 28 October 2018). 59 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 139. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). With regard to the Flemish regional legislation, see article 1 paragraph 2 of the Protocol. 60 See http://www.auditvlaanderen.be/klokkenluiden-bij-de-vlaamse-overheid (last accessed 13 June 2018).

17

3. BULGARIA COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Bulgaria has no stand-alone legislation dedicated to the protection of whistleblowers in the public and private sector.

• The most important laws that offer fragmented protection to whistleblowers are the Administrative Procedure Code (APC) and the Conflict of Interest Prevention and Ascertainment Act (CIPAA).

• Other relevant laws are the Criminal Code;61 the Law on Prevention and Detection of Conflict of Interests; the Corruption Prevention and Forfeiture of Illegal Assets Act (2018) and the Administration Act.

• The main legislation only covers public institutions.62 2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined

by law. 3. Who are protected? • Every citizen who discloses wrongdoing related to the public

sector is covered by the APC and CIPAA. 63 • The Conflict of Interests Law refers to ‘everyone who has

information about a person holding a public office and who infringes a provision of that legislation has the right to submit a report on the allegation of the conflict of interest’ (article 47(1)).

4. What types of wrongdoing can be disclosed?

Disclosures based on the APC and the CIPAA should regard the public sector and can concern matters including the abuse of power, corruption, conflict of interests in the public sector and other illegal or inappropriate acts.64

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures made by whistleblowers.

• Specific disclosures can be made to: - Signals of corruption can be addressed to inspectorates

(bodies) within the ministries, based on the Law for the Civil Servants.65 Such signals can also be appointed to the ombudsman (article 109 APC).

- The Commission for Prevention of Corruption and Forfeiture of Illegal Assets is empowered to investigate reports against high public official, including elected representatives, but not against middle and low level officials.66

61 The Criminal Code also applies to whistleblowers, meaning that some of the defined criminal offences can be subject to whistleblowing, according to Lauren Kierans, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Bulgaria, (April 2013), p. 4. 62 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 140. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 63 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 140. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 64 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 141. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). Also: Lauren Kierans, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Bulgaria, (April 2013), p. 5 65 Lauren Kierans, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Bulgaria, (April 2013), p. 7. 66 Chapter 6 of the Corruption Prevention and Forfeiture of Illegal Assets Act.

18

- The National Council on Anti-Corruption Policies (Council of Ministers) via an online tools.

- The Ministry of Finance maintains an online tool for submission of disclosures of irregularities and fraud committed in the course of EU-funded projects.67

• Disclosures can also be made to the Advocacy and Legal Advice Centre of TI Bulgaria.

6. How can wrongdoings be disclosed?

• Disclosing channels are not heavily regulated. • All citizens are required to disclose criminal acts, based on

article 205(1) CPC. • Several inspectorates provide online tools and e-mail

addresses and/or telephone lines in order to receive disclosures.

• The APC requires the recipient body to conduct an internal investigation regarding the report of the signal.68

• In general, in the private sector there’s no requirement to implement whistleblowing mechanisms.

7. What kind of protection does the law offer?

• There is no general protection mechanism concerning whistleblowers in place. Alternative laws offer protection such as: - The Labour Code and the Civil Servant Law offer

protection against unfair dismissal. - Protection against prosecution due to disclosures in the

context of the APC and the CIPAA (article 108(2) of the APC and the CIPAA).69 The CIPAA also requires the person responsible for handling the disclosures to take concrete measures in order to protect the dignity of whistleblowers.

- Inspectors of the General Labour Inspectorate Executive Agency are allowed to investigate violations of rights of civil servants at their workplace based on reports/complaints of public sector employees (article 128(1) Civil Servants Act).

• The burden of proof is not regulated. • The APC and the CIPAA do not require disclosure in good

faith or with reasonable belief that the disclosed information is true.70

8. How is the identity of whistleblowers protected?

• There is no general legal basis for confidentiality. According to the APC, administrations are allowed to create their own procedures.71 According to the CIPAA, persons handling the reports are not allowed to reveal the identity of the whistleblower.72 They can face a fine in the case they do reveal the identity.

67 See: http://www.minfin.bg/en/375 (last accessed 4 November 2018). 68 Lauren Kierans, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Bulgaria, (April 2013), p. 4. 69 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 141. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 70 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 141. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 71 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 141. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 72 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 141. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

19

• The laws prohibit anonymous reporting. • Based on the Corruption Prevention and Forfeiture of Illegal

Assets Act, the identity of whistleblowers that disclose under this act is protected (article 49(1)).

9. Does the law include remedies for whistleblowers?

• The law does not offer specific remedies to whistleblowers that are harmed due to their disclosure.

• There are general provisions that allow employees to receive compensation of retaliation, dismissal or harassment due to their disclosures, for example based on the Labour Code, Civil Servant Law, Corruption Prevention and Forfeiture of Illegal Assets Act (article 51) and the CIPAA.73 These can be used as a remedy in the absence of specific rules.

10. Other relevant aspects • The legal framework does not offer specific rights regarding whistleblower participation nor the right to a fair hearing.

• There is no reward system for whistleblowers in place. • There are some stakeholders trying to be involved in the

regulation of protection of whistleblowers, for example Transparency International Bulgaria. However, there is no involvement regarding the design and periodic review of legislation dedicated to whistleblowers.

11. Final notes N/A

73 Lauren Kierans, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Bulgaria, (April 2013), p. 9. Also Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 141. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

20

4. CROATIA COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Croatia has no stand-alone legislation dedicated to protect whistleblowers.

• The protection of employees in both the private and the public sector is based on fragmented provisions in laws, such as the Civil Servants Act; the Governmental Employees Act; the Trade Act; the Law on the Internal Financial Control System in the Public Sector; the Labour Act; the Criminal Code and the Civil Law Obligation Act.

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? All employees in the public and private sector.74 4. What types of

wrongdoing can be disclosed?

Disclosures can be made by all citizens’ concerning (a suspicion of) corruption. 75 In addition, civil servants can disclose any irregularity that relates to the internal financial control system based on the Law on the Internal Financial Control System in the Public Sector.76

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

• Specific disclosures can be made to: - Governmental hotlines for crime and corruption;77 - The Public Prosecutors office;78 - The Bureau for Combatting Corruption and Organised

Crime (USKOK).79 6. How can wrongdoings

be disclosed? • In general, companies are not required to implement

whistleblowing mechanisms. There is no general requirement to report internally before external disclosures can be made.80

• External disclosures can be made to several authorities and hotlines.81

7. What kind of protection does the law offer?

• There is no general protection mechanism concerning whistleblowers in place. Alternative legislation offers protection including unfair dismissal and discrimination at work to employees in both sectors.82 This can also derive

74 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 142. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 75 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 143. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). The protection of private sector employees is based on the Trade Act and the Labour Act. 76 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 143. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 77 Blueprint for Free Speech, Briefing Paper. Whistleblower Protection in Croatia, (2018). 78 S. Laleta and V. Smokvina (2016), p. 83. 79 S. Laleta and V. Smokvina (2016), p. 83. 80 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 143. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 81 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 143. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 82 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 143. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). See also: S. Laleta and V. Smokvina (2016), p. 88.

21

from the Labour Act (article 7, par. 4 and 5) if the disclosure regards corruption and it is made in good faith. More specifically, civil servants are protected of the disclosure of (suspicions of) corruption to the appointed individuals or authorised government institutions.

• A whistleblower can be treated as a protected witness, according to articles 283-300.83

• In the private sector the burden of proof is reversed and therefore placed upon the employer.

• In any case, disclosures must be made in good faith.84 8. How is the identity of

whistleblowers protected?

• In general, confidentiality is guaranteed.85 The Labour Act protects the anonymity of civil servants, and whistleblowers receive additional protection regarding denial or restriction of rights and protection of harassment, based on the Civil Servants Act. 86 The identity of civil servants can also be protected under the Civil Service Act if the disclosed wrongdoing qualifies as ‘serious’.87

• The legal framework does not accept nor prohibit anonymous disclosing.

9. Does the law include remedies for whistleblowers?

• The law does not offer specific remedies to whistleblowers that are harmed because of their disclosure. However, it is possible to seek remedies in alternative laws including the Civil Obligations Act. Based on this law, any person who suffered damages as a result of acts of corruption can receive compensation.

• Employers can be punished with (up to 3 year) imprisonment if they unfairly dismiss a whistleblower who disclosed corruption.88

10. Other relevant aspects • The legal system does not offer any rights to whistleblowers to participate in the follow-up of their disclosure or give them feedback rights.89

• The law does not specifically entitle whistleblowers to a fair hearing.

• There is no reward system for whistleblowers in place. • There is no specific involvement of key stakeholders in the

design and/or periodic review of legislation dedicated to whistleblowers.

11. Final notes Croatia is currently in the process of enacting the Whistleblower Protection Act. The Whistleblower Protection Act will enter into force on 1 July 2019 and must come into full compliance by March 2020.90

83 S. Laleta and V. Smokvina (2016), p. 82. 84 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 143. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 85 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 143. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 86 S. Laleta and V. Smokvina (2016), p. 87 – 88. 87 M. Worth, ‘Whistleblower Protection in Southeast Europe’, p. 23. According to this research, restricting the rights of employees qualifies as a ‘serious’ crime. 88 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 143. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 89 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 143. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 90 See: https://www.schoenherr.eu/publications/publication-detail/croatia-enacts-whistleblower-protection-act/

22

5. CYPRUS COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Cyprus has no stand-alone legislation dedicated to protect whistleblowers in both the public and private sector.91 The most important protective law is the Public Service Law that requires public sector employees to disclose incidents of corruption and bribery.92

• Other relevant laws and regulations are the Criminal Code; the Code of Ethics of the Public Services; the Labour Law; the Unfair Dismissal Law; the Civil Law Convention on Corruption and Supplementary Provisions Law of 2003.

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? The Public Service Law concerns employees, including a wide range of types of employees (article 2).

4. What types of wrongdoing can be disclosed?

It is unclear what kind of wrongdoings can be disclosed in order to receive protection.

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

• Specific disclosures can be made to: - Governmental hotlines and a direct phone line;93 - The Advocacy and Legal Advice Centre of TI Cyprus; - The Public Service Commission; and - The General Audit Office.94

6. How can wrongdoings be disclosed?

• In general, companies are not required to implement whistleblowing mechanisms. There is no general requirement to report internally before external disclosures can be made.

• There is no legal basis for external disclosure, nor a specific authority to disclose to in the private sector.

• For civil servants, a channel has been introduced to receive disclosures of misconduct in the public sector. 95 It is important to note that public officials are required to disclose any abuse by other public officials.

• According to the Police Act 2018, each member of the police is required to disclose acts or omissions of another member that constitute (potential) corruption.

7. What kind of protection does the law offer?

• There is no general protection mechanism concerning whistleblowers in place. However, alternative laws also offer protection including: - General protection against retaliation offered by labour

courts, based on the labour law provision on unfair

91 Currently, a draft legislation has been promoted at the parliament, called: “Reporting of Corruption Acts (additional protection and leniency measures) Law 2017. 92 G. Thüsing and G. Forst, ‘Whistleblowing – A Comparative Study’, Springer (2016), p. 109. 93 Constantinos Kombos, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Cyprus (2012), p. 19. See: https://anticorruption.police.gov.cy/police/platform/platform.nsf/subscribe_en/subscribe_en?OpenForm (last accessed 10 October 2018). 94 G. Thüsing and G. Forst (2016), p. 109, for corruption occurring in (semi-)governmental sectors. 95 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 146. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

23

dismissal.96 Such protection to civil servants derives from the Public Service Law (article 69A) and the Code of Ethics of Public Services.97

• Since 2004, retaliating against a whistleblower is a crime.98 • In general, the burden of proof lies with the employer.99

8. How is the identity of whistleblowers protected?

There is no general guarantee of the protection of the identity of the whistleblower nor the general acceptance of reporting on an anonymous basis. For example, (required) disclosures that are made under article 69a Public Services Law cannot be made anonymously.100 In contrast, other reports, not required under article 69a Public Services Law, can be made anonymously to police officers.101 The Internal Audit Service of the Police will handle such reports.102

9. Does the law include remedies for whistleblowers?

• The law does not provide specific remedies for whistleblowers. However, it is possible to seek remedies in alternative laws. 103

• The law includes a specific sanction with regard to anyone imposing an unjustified punishment on a whistleblower (who disclosed corruption) according to article 7 of the Civil Law. In addition, violation of article 7 of the Criminal Code (regarding whistleblower protection) can result in being fined or sent to prison.104 The Civil Law Convention on Corruption describes the same sanction for unjustified punishment of a whistleblower for disclosing corruption.105

10. Other relevant aspects • Regarding whistleblower participation: the public entity that received a disclosure from a whistleblower is required to update the whistleblower concerning the progress and results of the proceeding.106

• There is no reward system in place nor does the law offer the right to a fair hearing.

• There is some involvement of stakeholders in the design of legislation dedicated to whistleblowers. For example, TI Cyprus assisted in the development of a draft whistleblowing law in 2015.107

11. Final notes In 2012, a whistleblower was promoted for his actions regarding the disclosure of nepotism; the involved government officials were convicted and fined.108

96 Blueprint for Free Speech, ‘Briefing Paper Protection in the EU, Cyprus’ (2018). 97 Constantinos Kombos, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Cyprus (November 2012), p. 7. 98 Blueprint for Free Speech, ‘Briefing Paper Whistleblower Protection in the EU, Cyprus’ (2018). 99 G. Thüsing and G. Forst, ‘Whistleblowing – A Comparative Study’, Springer (2016), p.109. 100 Constantinos Kombos, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Cyprus (November 2012), p. 17. 101 See: https://anticorruption.police.gov.cy/police/platform/platform.nsf/subscribe_en/subscribe_en?OpenForm (last accessed 30 October 2018). 102 Establishment and Operation of the Internal Audit Service of the Police Law 2018. 103 Constantinos Kombos, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Cyprus (November 2012), p. 17. 104 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Cyprus’ (2018).See also G. Thüsing and G. Forst (2016), p. 109. 105 Constantinos Kombos, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Cyprus (November 2012), pp. 7 and 16. 106 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 146. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 107 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Cyprus’ (2018). 108 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Cyprus’ (2018).

24

6. CZECH REPUBLIC COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• The Czech Republic has no stand-alone legislation dedicated to protect whistleblowers in both the private and public sector. The most important protective laws are the Government Resolution no. 145/2015 Coll. and the Administrative Procedure Code (APC). 109 They apply to the public sector.

• Other relevant laws are the Criminal Code; the Labour Code; the Anti-Discrimination Act; Ombudsman Act and the Act on Banks. 110

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law. However, In the Directive of 15 June 2015 (part of the Civil Service Act) ‘whistleblower’ is defined as “oznamovatel”, meaning any person who discloses misconduct.111

3. Who are protected? Civil servants who disclosed misconduct in the public sector. 4. What types of

wrongdoing can be disclosed?

The APC does not specify what acts qualify as ‘misconduct’. 112 Only specific types of wrongdoings can be disclosed, based on specific laws such as the labour law.

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

• Specific disclosures can be made to: - The Ombudsman which may investigate individual

cases, both in response to a whistleblowers complaint and/or on his or her own accord. However, the mandate of the Ombudsman is limited since he cannot overrule activities of or decisions made by civil service agencies.113

- Under the Directive (part of the Civil Service Act) there is a special internal mechanism for disclosing (dedicated investigator, hotline, email, post box).

- Employees can also contact Labour Inspectorates and labour offices regarding violations of labour law, such as discrimination.114

6. How can wrongdoings be disclosed?

• In general, companies are not required to implement whistleblowing mechanisms. There is no general requirement to disclose internally before external disclosures can be made. This is different in the public sector:

109 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 145. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 110 (Unofficial) translations via: http://www.ejtn.eu/PageFiles/6533/Criminal%20Code%20of%20the%20Czech%20Republic.pdf, https://www.ochrance.cz/fileadmin/user_upload/DISKRIMINACE/pravni_predpisy/Anti-discrimination-Act.pdf, http://www.parliament.am/library/Ombudsman/Czech%20republic.pdf, https://www.mpsv.cz/files/clanky/3221/Labour_Code_2012.pdf and https://www.cnb.cz/miranda2/export/sites/www.cnb.cz/en/legislation/acts/download/act_on_banks.pdf (last accessed 22 January 2019). 111 Based on input from the TI Chapter in the Czech Republic. 112 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 145. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 113 Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Cyprus (November 2012), p. 7-8. 114 Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Czech Republic (2013), p. 6-7.

25

- Under the Directive of 15 June 2015 (part of the Civil Services Act), public institutions are obliged to (1) appoint an internal investigator regarding whistleblower reports; and (2) set up a whistleblower mechanism that allows disclosure. 115 These reporting mechanisms should be available to all governmental officials.

• The Code of Ethics requires employees from the government to disclose loss of property or fraudulent/corrupt behaviour. Reports can be made to a superior or competent body. However, the Code does not specify what bodies are competent.116

• Employees can disclose (suspicions of) violations of the labour law to labour inspectorates and labour offices. This includes discrimination.117

• The law does not require whistleblowers to disclose in good faith.118

7. What kind of protection does the law offer?

• There is no general protection mechanism concerning whistleblowers in place. However, protection can be derived from alternative laws including: - Protection against workplace retaliation for civil servants,

based on the Government Resolution.119 - Protection against unfair dismissal, discrimination and

changes in the work(location) is offered by the Labour Code. 120 This is also offered by the Anti-Discrimination Act. 121

- Protection against any (in)direct actions. The nature of these actions is not specified. 122

- Protection against the conduct of authorities and other Czech institutions.123

- Also, it is possible to qualify as witnesses and therefore receive special protection based on the criminal code.

• There is no legal basis for the reversal of the burden of proof. 8. How is the identity of

whistleblowers protected?

Disclosures based on the APC and the Government Resolution can be made confidentially and anonymously. However, the law does not include any penalties if this is breached. 124 When an

115 Based on input from the TI Chapter in the Czech Republic. 116 Country Report Czech Republic, p. 13. 117 Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Czech Republic (2013), p. 7. 118 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 146. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 119 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 145. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 120 Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Czech Republic (2013), p. 6. 121 Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Czech Republic (2013), p. 7. 122 Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Czech Republic (2013), p. 5-6. 123 Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Czech Republic (2013), p. 7-8. However, this protection is rather narrow since the Ombudsman is entitled to investigate matters regarding basic rights of individuals such as discrimination. Because of this limited scope, not all whistleblowers can or should report to the Ombudsman 124 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 145 - 146. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

26

inspection by labour inspectorates is carried out, the identity of the employee should be kept confidential.125

9. Does the law include remedies for whistleblowers?

The law does not provide specific remedies for whistleblowers. However, it is possible to seek remedies in alternative laws.

10. Other relevant aspects • In general, the law does not offer the whistleblower the right to participate after the disclosure nor the right to a fair hearing.

• There is no reward system for whistleblowers in place. • There is no specific involvement of key stakeholders in the

design and/or periodic review of legislation dedicated to whistleblowers.

11. Final notes Ozivení provides free legal advice to whistleblowers.126

125 Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Czech Republic (2013), p. 7. 126 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Czech Republic’ (2018).

27

7. DENMARK COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Denmark has no stand-alone legislation dedicated to protect whistleblowers in both the public and the private sector. The relevant fragmented laws that include disclosures and the protection of whistleblowers primarily focus on the financial sector.127

• Other relevant laws are: the Penal Code; the Danish Financial Business Act; the Danish Money Laundering Act; the Guidelines regarding whistleblowers of The Danish Data Protection Act (DPA); the Code of Conduct in the Public Sector and the Employers’ and Salaried Employees’ Act.128

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? Employees in the financial sector.129 4. What types of

wrongdoing can be disclosed?

Breaches (and potential breaches) of financial regulations that are committed by an undertaking can be disclosed.130

5. Which bodies can receive/investigate disclosures?

Disclosures can be made to the Danish Financial Supervisory Authority (FSA).131

6. How can wrongdoings be disclosed?

• In general, companies are not required to implement whistleblowing mechanisms. 132 There is no general requirement to disclose internally before external disclosures can be made.

• When disclosing through a whistleblowing mechanism, the DPA is relevant regarding processing data. The DPA recommends that disclosing through whistleblower mechanisms should be solely available to non-anonymously employees.133 Also, the transferral of personal data within the EU/EEA is unrestricted while transfer out of the EU/EEA is restricted.134

• Financial institutions are required to implement internal reporting mechanisms. 135 The scope of whistleblower mechanisms within financial institutions is broader than the

127 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 147. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 128 The Directive is relevant for law firms, the gambling sector and estate agencies. More specific, see the Danish Financial Business Act (sections 75a and 75b) and relevant; the American Sarbanes Oxley Act. 129 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 147. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 130 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 147. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 131 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 147. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 132 However, they are free to adapt mechanisms. 133 World Law Group, ‘Global Guide to Whistleblowing Programs’, (2016), p. 46. 134 The requirements are: (1) the receiving country needs to insure an adequate level of protection; (2) or there is an underlying legal basis for the transfer. 135 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 147. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

28

one issued by the DPA. Both less severe and severe breaches can be reported.136 It is possible that companies voluntarily implement an internal whistleblowing mechanism.

7. What kind of protection does the law offer?

• Whistleblowers who reported to the FSA can be protected against unfair treatment or any unfair consequence as a result of their report.137

• Employees of financial institutions are protected by the institution against unfavourable treatment based on the Financial Business Act.138

• With regard to the financial sector, there is no reversal of the burden of proof from the whistleblower to the employer.139 Public sector employees are also permitted to disclose non-confidential information to external parties if they respect certain rules (for example they have to state that they are not speaking on behalf of the institution). Public employees are further permitted to disclose confidential information if they are instructed to do so, are acting in an obvious public interest, are acting in their own or others’ best interests or if the information refers to something “clearly illegal”. If employees respect these rules, they are protected against internal sanctions and unfair dismissal.

8. How is the identity of whistleblowers protected?

• There is no general protection of the identity of whistleblowers.

• In the financial sector, the confidentiality of identity is guaranteed and anonymous reporting is accepted. 140

• The DPA recommends that disclosing through whistleblower mechanisms should be solely available to non-anonymous employees.141

9. Does the law include remedies for whistleblowers?

• The law does not include any remedies for whistleblowers. However, the whistleblower can seek remedies based on alternative legislation, such as: - Employees of financial institutions have the possibility of

compensation if the employee suffers detriment because of the disclosure.142

- Retaliation claims can be filed in labour court and will be decided based on case law due to the lack of legislation dedicated to whistleblowers. 143 In case of an unfair dismissal to a disclosure, claims can be made under the Danish Salaried Employees Act or applicable collective agreement.144

136 The Norton Rose Fulbright Guide, p. 79. 137 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 147. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 138 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 147. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 139 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 147. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 140 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 147. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 141 World Law Group, ‘Global Guide to Whistleblowing Programs’, (2016), p. 46. 142 Based on “Bill on whistleblowing systems in financial institutions’. See The Norton Rose Fulbright Guide, p. 80. 143 See: https://www.changeofdirection.eu/assets/briefings/EU%20briefing%20paper%20-%20Denmark%20-%20english.pdf (last accessed 10 July 2018). 144 The Norton Rose Fulbright Guide, p. 80.

29

10. Other relevant aspects • The law does not provide for the participation of whistleblowers and the right to a fair hearing. 145

• There is no rewards system for whistleblowers in place. There is no specific involvement of key stakeholders in the design and/or periodic review of legislation, relevant to whistleblowers.

11. Final notes N/A

145 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 148. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

30

8. ESTONIA COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Estonia has no stand-alone legislation dedicated to protect whistleblowers. The most important law regarding whistleblowers is the Anti-Corruption Act 2012 (ACA) addressing both the public and private sector.146

• The provisions of the ACA are complemented by Order 164 of the Director General of the PBGB

• Other relevant laws are the Penal Code; the Public Service Act (PSA); the Witness Protection Act; the Administrative Procedure Act (APA); and the Employment Contract Act.

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? • The ACA refers to ‘any person who can receive protection.147 • With regard to public officials, the ACA refers to “a natural

person who holds an official position for the performance of public duties who has the right to make binding decisions, perform acts or take part in their making notwithstanding if he or she is performing those tasks permanently or temporarily, for remuneration or for free or has been elected to the office or appointed to the office” (§2 ACA).148

4. What types of wrongdoing can be disclosed?

According to the ACA, all incidents of corruption qualify as the type of wrongdoing that can be disclosed.149

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

• Specific disclosures can be made to: - The hotline of the Central Criminal Police. Corruption can

be disclosed through this hotline.150 6. How can wrongdoings

be disclosed? • In general, companies are not required to implement

whistleblowing mechanisms. There is no general requirement to disclose internally before external disclosures can be made.151

• Disclosures of corruption can be made to “agencies performing public duties, public officials, and persons exercising supervision over agencies, persons controlling

146 Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Estonia (2013), p. 3-4. It is important to note that the ACA only regulates reporting channels and does not offer any form of protection. Therefore, it is not a stand-alone piece of legislation. See also: https://www.riigiteataja.ee/en/eli/530032016001/consolide (last accessed 22 January 2019). 147 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 148. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 148 Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Estonia (2013), p. 7. 149 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 148. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 150 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Estonia’, (2018). 151 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 149. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

31

declarations or bodies conducting proceedings concerning an offence”.152

• Civil servants and employees must report suspected corruption and misconduct (listed as “corrupt use” of an official position, as well as “corrupt use” of public resources, influence or inside information) by colleagues in accordance with section 6 ACA.153

• While there is no disciplinary liability for non-reporting under the ACA, a failure to report would entail a violation of the CSA for civil servants and Employment Contracts Act for employees.154

• If the act of corruption occurred “outside the performance of public duties” they may also be disclosed (§6 sub 5 ACA), though it is unclear to what extent the (in principle public sector) rules and principles can be applied to the private sector.155

• Disclosing in good faith is required.156 7. What kind of

protection does the law offer?

• There is no general whistleblower protection mechanism in place. However, protection can derive from alternative laws including: - Protection of employees against retaliation, if the

disclosure has been made under the ACA.157 - Protection against unfair dismissal based on the

Employment Contract Act. - Protection against the jeopardizing of the safety of

anyone who qualifies as a witness, according §6 of the Witness Protection Act.158

• If the whistleblower proves that he/she suffered negative treatment due to the disclosure, the assumption will be made that this treatment is related to the disclosure. The employer/office needs to prove otherwise in order to avoid being sanctioned.159

8. How is the identity of whistleblowers protected?

• The identity of the whistleblower shall remain confidential and can be disclosed only with the written consent of the official having made the notification.160

• The ACA guarantees anonymity of the whistleblower when requested. If there is a risk that the source will be revealed,

152 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 149. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 153 See: https://rm.coe.int/fifth-evaluation-round-preventing-corruption-and-promoting-integrity-i/1680900551 (last accessed 22 January 2019), p. 53. 154 See: https://rm.coe.int/fifth-evaluation-round-preventing-corruption-and-promoting-integrity-i/1680900551 (last accessed 22 January 2019), p. 53. 155 Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Estonia (2013), pp. 4-5. 156 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 149. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 157 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Estonia’ (2018). Also relevant: Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Estonia (2013), p. 4. 158 See also §8 for protection before and after court proceedings, and §3 for unlawful influence. Transparency International Estonia, ‘Whistleblower Protection Assessment Report on Estonia’, p. 6. 159 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 149. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). See also: https://rm.coe.int/fifth-evaluation-round-preventing-corruption-and-promoting-integrity-i/1680900551 (last accessed 22 January 2019), p. 54. 160 See: https://rm.coe.int/fifth-evaluation-round-preventing-corruption-and-promoting-integrity-i/1680900551 (last accessed 22 January 2019), p. 54.

32

the investigation will be ceased and the investigators will try to gather the disclosed information through other means.161 However, this is not the case if the whistleblower discloses knowingly false information.162

• If the whistleblower discloses knowingly false information, the guarantee of anonymity will be lifted, according to the ACA. 163 Such disclosures could also lead to punishment under the Penal Code (§319).

• In case an employee fails to disclose, the whistleblower could be subjected to disciplinary punishments due to the loss of trust. 164 However, such punishments can be challenged on the on the base of PSA and APA. The law does not accept nor prohibit anonymous disclosure.

9. Does the law include remedies for whistleblowers?

The law does not provide any remedies for whistleblowers.165 However, it is possible to seek remedies in alternative laws, such as the Employers and Salaried Employees Act.

10. Other relevant aspects • The law does not offer rights regarding participation for whistleblowers such as a follow-up or a fair hearing.166

• There is no reward system for whistleblowers in place. • There is no specific involvement of key stakeholders in the

design and/or periodic review of legislation, dedicated to whistleblowers.

11. Final notes N/A

161 See: https://rm.coe.int/fifth-evaluation-round-preventing-corruption-and-promoting-integrity-i/1680900551 (last accessed 22 January 2019), p. 54. 162 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 149. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 163 Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Estonia (2013), p. 5. 164 The scope for both the failure of reporting and the concealment of crime is limited. It only extends to crimes of first degree. See §306 and §307. Also, Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Estonia (2013), p. 4. 165 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 148. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 166 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 149. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

33

9. FINLAND COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Finland has no stand-alone legislation dedicated to protect whistleblowers in both the private and public sector. The available (fragmented) legislation focuses on regulating disclosing in the financial sector.

• Relevant laws are the Act on Credit Institutions; the Act on Financial Supervision; the Employment Contracts Act; the Act on the Protection of Privacy in Working Life and the Personal Data Act.

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? The legal framework does not offer any specific protection.167 4. What types of

wrongdoing can be disclosed?

Breaches of financial legislation applicable to the financial sector.168

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

Employees of credit facilities can use their internal channels and government officials are required to make their disclosures to the police.169

6. How can wrongdoings be disclosed?

In general, companies are not required to implement whistleblowing mechanisms. There is no general requirement to disclose internally before external disclosures can be made. This is not the case for credit institutions; these entities are required to implement such mechanisms in order to enable the disclosure of breaches.170

7. What kind of protection does the law offer?

• There is no general whistleblower protection mechanism in place. Only employees of credit institutions can derive some protection based on the Act on Credit Institutions which states that “credit institutions should implement appropriate and adequate measures in order to protect whistleblowers”. It is not specified what kind of protection should be implemented.171

• Also, protection can derive from alternative laws such as the Employment Contracts Act.172

167 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 150. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 168 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 149 – 150. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 169 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Finland’(2018). 170 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 149. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 171 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 150. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 172 According to the Norton Rose Fulbright Guide, whistleblowing on itself does not qualify as a proper and weighty reason and can therefore not be used by the employer.

34

8. How is the identity of whistleblowers protected?

• In the financial sector, confidentiality is guaranteed.173 • The legal framework does not accept nor prohibit

anonymous disclosures. 9. Does the law include

remedies for whistleblowers?

The law does not offer specific remedies to whistleblowers that are harmed because of their disclosure. Whistleblowers can use alternative laws to seek for remedies such as labour laws.174

10. Other relevant aspects • The law does not offer specific rights regarding participation in follow-up steps for whistleblowers nor a fair hearing.175

• There is no reward system for whistleblowers in place. • There is no specific involvement of key stakeholders in the

design and/or periodic review of legislation, dedicated to whistleblowers.

11. Final notes In case the whistleblower disclosure includes personal data, the data needs to be processed in accordance with the Personal Data Act. If not, sanctions can be imposed.176

173 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 150. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 174 The OECD Phase 4 report’ (2017), p. 13-14. Also relevant: The Norton Rose Fulbright Guide, p. 84. 175 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 150. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 176 The Norton Rose Fulbright Guide, p. 84.

35

10. FRANCE COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

In 2016, France implemented a stand-alone piece of legislation addressing both the private and public sector (the Sapin II Act).177

2. Definitions • The term ‘whistleblower’ is defined as “an individual disclosing or reporting – in good faith – a crime, an offence, a violation of an international commitment, a law or regulation infringement, a threat or an important prejudice to the general interest he or she became aware off.”178

• The term ‘whistleblowing’ is not defined. 3. Who are protected? All employees in both sectors are covered.179 4. What types of

wrongdoing can be disclosed?

Under the Sapin II Act, “any serious harm or threat to the public interest, as well as violations of the national and international law” can be disclosed.180

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers. Where a whistleblower should direct their disclosure depends on the phase of the disclosure and the way the disclosure has been handled in the past, for example by their employer.

• In November 2018, the French House for Whistleblowers, an initiative of 17 organisations (including TI-France) and trade unions was opened. The ‘Maison des Lanceurs D’Alerte’ offers legal advice to whistleblowers whereby they are informed about their rights and obligations and receive assistance in bringing their case. The House also offers technical support in securely sharing information and if necessary moral and psychological support. Moreover, in some cases it can provide financial support from the donation fund.181

6. How can wrongdoings be disclosed?

• Firstly, whistleblowers should report to their supervisor, employer or any referent appointed by their employer. If that first recipient fails to verify within a reasonable period of time, or in the event of a serious and imminent danger, risk or irreversible damage, the disclosure can be made to external (judicial or administrative) authorities. If these authorities do not act on the disclosure within 3 months, the report can be made public.182

177 (Unofficial) translation of the whistleblower provisions: https://www.whistleblower-rights.org/s/Sapin-II-2016-final-English.doc (last accessed 22 January 2019). 178 See: http://www.osborneclarke.com/insights/whistleblowing-a-new-regulation-in-france-in-january-2018/ (last accessed 24 July 2018). 179 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 151. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 180 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 151. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 181 See: https://mlalerte.org/ 182 See: http://www.osborneclarke.com/insights/whistleblowing-a-new-regulation-in-france-in-january-2018/ (last accessed 24 July 2018). Also relevant: Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 151. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

36

• Also, it is important to note that all companies with over 50 employees are required to implement a professional whistleblower mechanism. Such a mechanism should be available to employees and external stakeholders of the company (article 17 of the Sapin II Act).

7. What kind of protection does the law offer?

• The Sapin II Act protects whistleblowers against workplace retaliation in a broad way, such as discrimination, sanctions and not having access to work-related programmes.

• Whistleblowers cannot be held criminal liable for disclosure of legally protected bank or trading secrets if disclosure of the information is necessary and proportionate to the involved interests. Retaliation is prohibited (article 10 of the Sapin II Act).

• The burden of proof is reversed from the whistleblower to the employer. Besides that, whistleblowers are required to disclose information in an objective manner and in good faith.183

8. How is the identity of whistleblowers protected?

Confidentiality of the identity of the whistleblower is guaranteed and anonymous reporting is accepted according to article 9 of The Sapin II Act.

9. Does the law include remedies for whistleblowers?

Yes, an interim relief is available to suspend dismissal and whistleblowers can be entitled to reinstatement after a trial.184

10. Other relevant aspects • The Sapin II Act does not offer specific rights to whistleblowers in order to participate or to receive a fair hearing.

• There is no reward system for whistleblowers in place. • There is no specific involvement of key stakeholders in the

design and/or periodic review of legislation relevant to whistleblowers.

11. Final notes • In case a whistleblower acts in bad faith, he/she can be held liable under tort law and face criminal or disciplinary sanctions, for example slander (up to 5 years of imprisonment and a criminal fine up to EUR 45.000) or dismissal for fault.

• A breach of confidentially can lead to punishment such as imprisonment up to two years and a fine up to EUR 30.000 (individuals) or EUR 150.000 (legal entities).185

• Preventing transmission of a report from a whistleblower is punishable by imprisonment (one year) and/or a criminal fine (up to EUR 15.000).

183 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 152. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 184 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 151. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 185 See: http://www.osborneclarke.com/insights/whistleblowing-a-new-regulation-in-france-in-january-2018/ (last accessed 24 July 2018); see also: Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 151. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

37

11. GERMANY COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Germany has no stand-alone legislation dedicated to protect whistleblowers in both the public and private sector. The most important laws dedicated to the protection of whistleblowers are the Federal Civil Service Act and the Law on the Federal Financial Supervisory Authority, primarily covering the public and financial sector.186

• Other relevant laws are the Criminal Code (StGB); the Handelsgesetzbuch (HGB); the Employment Protection Act; the Civil Code (BGB); the German Data Protection Act (BDSG); the German Works Constitution Act (BetrVG) and the Financial Services Supervisory Law (FinDAG).

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? In the public sector only employees are covered whereas in the financial sector all employees and companies of financial institutions under the control of the Federal Financial Supervisory Authority are covered.187

4. What types of wrongdoing can be disclosed?

With regard to the public sector, concerns regarding the legality of official orders and criminal acts can be disclosed. In the financial sector, wrongdoing related to money laundering and terrorism financing, and any (potential) violation of (European) law and regulations related to ensure compliance with this legislation by the companies and supervisors.188

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

• Specific disclosures can be made to: - Employees from the financial market can make

disclosures regarding the financial sector to the Federal Financial Supervisory Authority (BAFin);

- Discrimination offences can be disclosed to the Federal Anti-Discrimination Agency;189

- In general, disclosures regarding criminal offences can be made to the public prosecutor.190

6. How can wrongdoings be disclosed?

• Apart from the financial sector, there is no legal obligation to implement internal reporting mechanisms. However, in general, public authorities do have internal complaints procedures. 191 Whistleblowers are usually not required to first disclose internally.

186 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 152. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 187 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 153. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 188 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 153. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 189 See: https://www.globalworkplaceinsider.com/2014/05/whistleblowing-what-protection-do-employees-have-in-germany/ (last accessed 30 October 2018). 190 See: https://www.whistleblower-net.de/pdf/WB_in_Germany.pdf (last accessed 30 October 2018). 191 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 153. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

38

• Data Protection Officers can disclose possible violations of data protection legislation to the relevant authorities (BDSG);

• Employees can file a complaint to their employer and/or works council regarding unfair treatment (BetrVG).

• German Financial Institutions are required to implement an internal reporting mechanism (Banking Act Sec. 25a para 1 s. 6 no. 3).

• Disclosures regarding (threats of) safety and health protection can be made to the relevant authorities if an employer has not remedied previous internal complaints.

• Disclosures to the BAFin can be made without at first disclosing internally (FinDAG Sec. 4d).

7. What kind of protection does the law offer?

• There is no general whistleblower protection mechanism in place. However, protection can derive from alternative laws such as: - Disclosures made under the FinDAG offer protection

against penalties under criminal and labour law.192 - General protection in the public sector is offered against

disadvantages and criminal acts. 193 Also, witness procedural rules apply.

- Discrimination due to the exercise of rights (for example the freedom of speech) cannot lead to sanctions (section 612(a) BGB). This type of protection only applies if the whistleblower can demonstrate that the disclosure of information was legally permissible, the discrimination actually took place, and it is a result of the disclosure itself.

- Whistleblowers need to act in good faith and there is no reversal of burden of proof from the whistleblower to the employer.194

8. How is the identity of whistleblowers protected?

• There is no general guarantee of protection of the identity of whistleblowers. However, some bodies do offer the protection of the identity, like in the financial sector: the BAFin (FinDAG Sec. 4d paragraph 6).195

• Disclosures made to the BAFin can also be made anonymously (FinDAG Sec. 4d paragraph 6). However, reporting on an anonymous basis is not encouraged.196

• The protection of whistleblowers based on the FinDAG can be lifted if the disclosure is knowingly false and was made intentionally or with gross negligence.197 This could also lead to criminal prosecution, according to §145d StGB for pretending to have committed a criminal offence or according to § 164 StGB for false suspicion.

192 See: http://www.cms-lawnow.com/ealerts/2017/03/federal-financial-supervisory-authoritys-central-contact-point-for-whistleblowers (last accessed 10 October 2018). 193 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 153. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 194 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 153. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 195 The whistleblowers’ anonymity may be lifted in connection with investigations or other administrative or judicial proceedings. 196 See: https://globalcompliancenews.com/germany-whistleblowing-hotlines-20180822/ (last accessed 10 October 2018) 197 See: http://www.cms-lawnow.com/ealerts/2017/03/federal-financial-supervisory-authoritys-central-contact-point-for-whistleblowers (last accessed 10 October 2018)

39

• There are no legal consequences for retaliating employers. In addition, the law does not offer a legal basis for whistleblowers to sue the employer and claim damages.198

• In case of criminal wrongdoing, confidentiality in the context of witness protection is guaranteed.199

9. Does the law include remedies for whistleblowers?

It is possible that a court accepts an unfair dismissal due to the fact that continuation of the contract can be unacceptable for the employer. In that case, the employer needs to pay the employee a small amount (section 10, paragraph 2 Termination-Protection Employment Law). However, each case must be assessed individually.

10. Other relevant aspects • The law does not offer specific rights regarding participation after a disclosure has been made nor does it provide rights to a fair hearing. However, whistleblowers can fight their unfair dismissal based on labour laws.

• There is no reward system for whistleblowers in place. • Organisations such as ‘the Whistleblower Netzwerk’ and

Blueprint for Free Speech are committed to support whistleblowers. In addition, the ‘Whistleblower Netzwerk’ was involved in a parliamentary hearing on the introduction of a whistleblower section in the Civil Code.200

11. Final notes N/A

198 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 153. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 199 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 153. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 200 See: https://www.whistleblower-net.de/pdf/WB_in_Germany.pdf (last accessed 21 October 2018).

40

12. GREECE COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• There is no stand-alone legislation dedicated to the protection of whistleblowers in both the private and public sector. The most important legislation related to the subject is the Public Interest Witness Protection Law 4254/2014, offering protection to whistleblowers in the public sector. 201

• Other relevant laws are the Civil Service Code; the Civil Code; the Criminal Procedure Code; Law 2928/2001 and the Data Protection Act.

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? Employees in the public sector are covered.202 4. What types of

wrongdoing can be disclosed?

• The types of wrongdoing that can be disclosed is limited to bribery (different forms), disloyalty in the service, false assertion, misappropriation, fraud and money laundering.

• In addition, all disclosed wrongdoing does need to be linked to the public interest. However, it is not clear how ‘public interest’ is defined.203

5. Which bodies can receive/investigate disclosures?

There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers. 204

6. How can wrongdoings be disclosed?

• In general, companies are not required to implement whistleblowing mechanisms. There is no general requirement to disclose internally before external disclosures can be made.

• Greek citizens are required to disclose illegal actions (article 40 Penal Code). The disclosures can be made to the Public Prosecutor or a responsible employee.

7. What kind of protection does the law offer?

• There is no general whistleblower protection mechanism in place. However, protection can be derived from alternative laws such as: - Whistleblowers qualify as witnesses acting in the public

interest, which means that they are protected from criminal prosecution with respect to offences such as disclosure of privileged information and false complaints (article 45B Code of Criminal Procedure, article 9 of Law 2929/2001 and article 252/371 Penal Code).205

201 Together with the OECD, Greece is working on the improvement of protection in the private sector. In this context: OECD (2018), Whistleblower Protection in the Private Sector: Developing the Legal Framework. (Unofficial) translation of the whistleblowing provisions: https://www.whistleblower-rights.org/s/Greece-WBer-provison-2014-rough-English.doc (last accessed 22 January 2019). 202 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 154. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 203 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 154. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 204 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 155. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 205 See: https://www.lexology.com/navigator#!results/290/view (last accessed 22 January 2019); see also: Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 154. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

41

- Public officials not involved in the disclosed wrongdoing can receive protection against prosecution for perjury, deformation, false accusations and official secrets violations if the public official reported bribery or influence peddling (Law 4254).206

- If an employee discloses corrupt practices in which he/she was involved, he/she can receive clemency or a less severe punishment (article 263B Penal Code).

• Civil Servants can request a transfer due to a disclosure (article 15, paragraph 2 Law 3849/2010).

• Whistleblowers need to act in good faith.207 8. How is the identity of

whistleblowers protected?

• The protection of confidentiality is not guaranteed. For example, the identity of the witness/whistleblower can be revealed in trial if the prosecutor orders to do so (article 9 of Law 2929/2001).

• The legal framework does not accept nor prohibit anonymous reporting.

9. Does the law include remedies for whistleblowers?

The law does not provide any remedies for whistleblowers. However, whistleblowers can use alternative laws to seek for remedies, such as the labour law.

10. Other relevant aspects • There is no legal basis for whistleblowers to be entitled to participation nor does the law offer the right to a fair hearing.

• There is no reward system for whistleblowers in place. • There is some involvement of key stakeholders in the design

of legislation dedicated to whistleblowers.208 11. Final notes N/A

206 Blueprint for Free Speech, ‘Gaps in the System: Whistleblower Laws in the EU, page 30. 207 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 154. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 208 In November 2017, The Hellenic Anti-Corruption Organization has delivered a proposal for a Law on Whistleblower Protection in Greece to the Minister of Justice: https://whistleb.se/whistleblowing-greece/ (last accessed 22 January 2019).

42

13. HUNGARY COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

Hungary has implemented stand-alone legislation dedicated to protect whistleblowers in both the private and public sector called: the Act CLXV on Complaints and Public Interest Disclosures (2013).209 Hereinafter referred to as “the Act”.

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? It covers all citizens (and therefore all employees) in both the public and private sector.210

4. What types of wrongdoing can be disclosed?

In this context, the Act refers to public interest disclosures, meaning a disclosure that calls attention to a circumstance the remedying or discontinuation of which is in the interest of the community or the society as a whole (article 1(3) of the Act).

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

• Disclosures can be made to the Ombudsman, who can direct the disclosures to the relevant authorities.211

6. How can wrongdoings be disclosed?

• The law requires the implementation of reporting channels in the public sector.212

• Regarding the public sector, two options are available: a centralised channel operated by the Ombudsman and an institutional reporting channel, operated by advisors.213

• The requirement to set up reporting channels does not apply to the private sector. However, if a company does implement such a system, it must meet the legal requirements (articles 4-10 and 13-16 of the Act).

• Disclosures can also be made externally via an online mechanism. There is no need to first disclose internally. The entity that receives the disclosure is required to follow up within 30 days (article 2(1) of the Act).

7. What kind of protection does the law offer?

• The protection is limited to the workplace.214 • Any action taken as a result of the disclosure of a public

interest or disclosure made in good faith, which may cause disadvantage to the whistleblower, shall be unlawful even if it would otherwise be lawful (article 11 of the Act).

• The State shall provide whistleblowers with legal aid (article 12 of the Act).

209 (Unofficial) translation: http://corruptionprevention.gov.hu/download/7/a2/90000/KIM%20555_2013-4.pdf (last accessed 22 January 2019). 210 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 156. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 211 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Hungary’ (2018). 212 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 156. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 213 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 156. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 214 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 156. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

43

• Disclosing in good faith is required and the law does not reverse the burden of proof.215

8. How is the identity of whistleblowers protected?

• The identity of the whistleblower will not be disclosed (article 3(3) of the Act). The guarantee of the protection of identity can expire if it becomes clear that the whistleblower disclosed false information of crucial importance and the disclosure was made in bad faith (article 3 (4) of the Act).

• In general, anonymous reporting is not accepted.216 9. Does the law include

remedies for whistleblowers?

The law does not include any specific remedies dedicated to whistleblowers.217 It only refers to restoring the unlawful situation and take the necessary actions (article 3 of the Act).

10. Other relevant aspects • With regard to whistleblower participation rights, the investigation body will hear the whistleblower if this is necessary (article 2 (3) of the Act) and the whistleblower has to be notified regarding the outcome of the investigation.218

• Legal persons may conclude in a contract with a lawyer for receiving and managing whistleblower reports (article 17 of the Act). The whistleblower is entitled to free legal advice.219

• There is no reward system for whistleblowers in place. • There is no specific involvement of key stakeholders in the

design and/or periodic review of legislation relevant to whistleblowers.

11. Final notes N/A

215 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 156. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 216 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 156. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 217 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 156. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 218 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 154. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 219 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 156. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

44

14. IRELAND COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

In 2014, Ireland implemented stand-alone legislation dedicated to protect whistleblowers both in the private and public sector, called the Protected Disclosures Act (PDA).220

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? The PDA protects all employees from the private and public sector who have made a protected disclosure.221

4. What types of wrongdoing can be disclosed?

The PDA refers to the (protected) disclosure of wrongdoing, which covers an offence; a breach of a legal obligation; a miscarriage of justice; an endangerment of health and safety; damage to the environment; a misuse of public funds; an oppressive, discriminatory or grossly negligent act or omission by a public body or one which constitutes gross mismanagement.222

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures made by whistleblowers.

• Specific disclosures can be made to: - The employer/responsible person (section 6 PDA); - The prescribed person (section 7 PDA); - The minister (section 8 PDA); - The legal adviser or Trade Union Official (section 9 PDA); - Others, such a Member of Parliament or a journalist.

6. How can wrongdoings be disclosed?

• Public bodies are required to implement internal disclosing mechanisms. Companies are not required to do so.223 It is possible to report to an external party, even if the disclosure has (at first) not been made internally. Disclosures to external parties, including the media, are protected if this is reasonable in the circumstances of the case.224 However, initial internal disclosure is encouraged.225

• The disclosures can be made online.226

220 See: http://www.irishstatutebook.ie/eli/2014/act/14/section/11/enacted/en/html#sec11 (last accessed 22 January 2019). It is important to note that the Act amended a large number of sectoral provisions such that if a disclosure made under a sectoral provision complies with the definition of protected disclosure under the PDA, then it will fall under its ambit and attract the protections therein. If, however, a disclosure made under a sectoral provision does not satisfy the requirements of the PDA, that disclosure will still be covered by the relevant sectoral provision. 221 The definition is very broad and includes (former) employees, trainees, and people working under a contract for services, independent contractors, agency employees, interns etc. However, the PDA does not include volunteers. Relevant: Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 157. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 222 Relevant: Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 158. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 223 Relevant: Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 158. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 224 Transparency International Ireland, ‘Speak Up Safely. TI-Ireland’s Guide to Whistleblowing and Making a Protected Disclosure’ (2014), p. 31 – 32. 225 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 158. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 226 See: http://www.citizensinformation.ie/en/employment/enforcement_and_redress/protection_for_whistleblowers.html (last accessed 4 November 2018).

45

7. What kind of protection does the law offer?

• All disclosures are assumed to be protected disclosures, until the employer proves the contrary.227

• An employee making a protected disclosure enjoys immunity from criminal prosecution and civil action for damages. In return, the worker (and other persons such as family members) may sue anyone who caused detriment to them due to the protected disclosure.

• Changes made to the PDA in June 2018 which were aimed at transposing the EU Trade Secrets Directive weakened protections by requiring a whistleblower to demonstrate he/she acted with the ‘purpose of protecting the general public interest’ when making protected disclosure using a trade secret. Employees are therefore exposed to criminal and civil action if they cannot prove their motivation in disclosing a trade secret.228

• Whistleblowers receive, based on the PDA, immunity from civil actions for damages. In return, the whistleblower may sue anyone who caused detriment to him/her due to the protected disclosure.

• Whistleblowers must report with a ‘reasonable belief.229 • If a disclosure is to be found incorrect, the whistleblower is

still protected if the whistleblower had reasonable belief the information was correct and the disclosure was made in the manner set out in the PDA. A reduction of compensation of up to 25% may be levied in cases where the investigation of the relevant wrongdoing was not the sole or main motivation for making the disclosure.

8. How is the identity of whistleblowers protected?

• Confidentiality is guaranteed since the persons receiving protected disclosures are not allowed to share the identity of the whistleblower without their consent. However, there are some exceptions.230

• The legal framework does not accept nor prohibit, anonymous disclosure.

9. Does the law include remedies for whistleblowers?

• Yes, if an unfair dismissal or penalisation is successfully claimed, the whistleblower may be awarded compensation up to 5 years pay. The claims can be made online.231

• Civil action leading to uncapped compensation can be brought against anyone causing a detriment arising from a protected disclosure or for loss caused by a failure to protect a discloser’s identity.

• Employers are vicariously liable for any detriment caused to a worker making a protected disclosure. This means that they can be held responsible for their employees’ penalisation of whistleblowing.

• Dismissals due to protected disclosures are assumed unfair. Whistleblowers can seek reinstatement and compensation for any detriment caused to them through their disclosure.

227 The disclosure qualifies as protected if it has been made according to the manner as prescribed in the DPA. 228 See: https://www.transparency.ie/resources/submissions/heather-humphreys-letter-PDA (last accessed 4 November 2018). 229 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 158. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 230 For example, if identifying the whistleblower is essential to the effective investigation of the matter. 231 See: http://www.citizensinformation.ie/en/employment/enforcement_and_redress/protection_for_whistleblowers.html (last accessed 4 November 2018).

46

10. Other relevant aspects • Employees are not entitled to participate in the investigation or to receive any more information on the investigation than any other person is.

• There is no rewards system for whistleblowers in place. • TI-Ireland, the Irish Congress of Trade Union and others

were consulted during the draft of the PDA and made submissions during its three-year review. TI-Ireland is also assisting the Irish government in implementing the PDA with public bodies and other employers through its Integrity at Work programme. Therefore, stakeholders are involved in the design and review of legislation dedicated to whistleblowers.

11. Final notes • The Transparency Legal Advice Centre provides free legal advice to anyone who wishes to disclose wrongdoing under the PDA.232

• The government (partly) funds the Speak Up whistleblower helpline of the Legal Advice Centre of TI-Ireland.233

232 See: https://www.transparency.ie/helpline/TLAC 233 See https://www.transparency.ie/integrity-work and https://www.transparency.ie/helpline ((last accessed 11 February 2019).

47

15. ITALY COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

In 2017, Italy implemented a stand-alone piece of legislation regarding the protection of whistleblowers, both in the private and the public sector. It concerns the law (no. 179/2017) freely translated as ‘Provisions to protect people reporting crimes or irregularities they became aware of within their public or private employment’ (hereinafter: “the Law”).234

2. Definitions • A public sector whistleblower is defined as ‘each employee of public administrations disclosing about illicit behaviours’ (article 1, par. 2 of the Law). It also applies to employees and contractors of companies providing goods or services on behalf of, and in favour of, the public administration.

• The term ‘whistleblowing’ is not defined by law. 3. Who are protected? All employees, including self-employed individuals, in both

public and private sector. 235 4. What types of

wrongdoing can be disclosed?

• The law refers to ‘reporting illicit behaviour he became aware of because of his employment’ (article 1 of the Law).

• The provision on the private sector refers to disclosing illicit behaviours based on specific and convergent elements or violations of the compliance programme they became aware of because of their employment (Legislative Decree 231/2001).236 In addition, violations of this legislation can be disclosed.

• The ‘illicit behaviour’ includes offences against the Public administration, abuse of power in order to obtain private advantages and the misuse of public functions for other, private, purposes, according to the ANAC Guidelines.237

5. Which bodies can receive/investigate disclosures?

• The National Anticorruption Agency (ANAC) is appointed to receive and investigate disclosures (article 1 of the Law).238

• Other relevant bodies are: - The Transparency and Anticorruption Officer (article 1 of

the Law); - The judiciary authority (article 1 of the Law); - The fiscal authority (public sector). - The criminal judiciary authority (public sector). - The fiscal judiciary authority (public sector).

6. How can wrongdoings be disclosed?

• Companies that fall within the scope of the Legislative Decree 231/2001 are required to implement an internal

234 The law amends a few existing laws and decrees, such as Legislative Decree 165/2001; Law 190/2012; Legislative Decree 385/1993; Legislative Decree 58/1998; Legislative Decree 231/2001; Legislative Decree 81/2008 and Law 300/1970. (Unofficial) translation: https://static1.squarespace.com/static/5a742d5ae9bfdf1f3304898d/t/5a974db8419202f909ee4e01/1519865278761/Italy+WBer+law+-+2017+English.pdf (last accessed 22 January 2019). 235 The term ‘public employees’ refers to employees of the public administration, of public-economic entities and employees of entities that are subject to public control or provide goods and services in relation to the public administration. See www.nortonrosefulbright.com/knowledge/publications/167206/whistleblowing-in-italy (last accessed 20 November 2018). 236 See: www.nortonrosefulbright.com/knowledge/publications/167206/whistleblowing-in-italy (last accessed 20 November 2018). 237 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 160. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 238 This agency has a central role in the (guiding of the) protection of whistleblowers (article 1).

48

whistleblowing mechanism. 239 Thus, employees of such companies can use those channels to disclose.

• In the public sector employees can disclose to external bodies.

7. What kind of protection does the law offer?

• A whistleblower cannot be sanctioned, demoted, dismissed, transferred or suffer from other organisational measures that directly or indirectly affect his/hers working conditions negatively as a consequence of the disclosure (article 54bis(1) of the Law).

• Discriminatory and retaliatory measures are void (article 54bis(7) of the Law).

• In case the whistleblower suffers negative consequences, he/she has the right to reinstatement (article 54bis(8) of the Law).

• The public administration body in which the whistleblower suffers retaliations must prove that the measures taken are motivated by other reasons than the disclosure (article 54bis(7) of the Law).

• Protections under this law are not applicable in case the whistleblower is convicted in the first degree for libel, defamation, other crimes related to the report or civil responsibilities for the same behaviour (article 54bis(9) of the Law).

8. How is the identity of whistleblowers protected?

• The legal framework does not accept nor prohibit anonymous disclosures.

• In case of confidential disclosures, the identity of the whistleblower cannot be revealed (article 1(3) of the Law).

• A disciplinary proceeding can only use the identity of the whistleblower with his consent.

• During criminal or fiscal proceedings, the identity of the whistleblower can be revealed at a certain stage of the project.

9. Does the law include remedies for whistleblowers?

The law includes the reinstatement or restoration of the employment position (article 54bis(7) of the Law).

10. Other relevant aspects • The law does not offer specific rights in regard to participation of the whistleblower. In addition, the law does not provide a (specific) fair hearing right for whistleblowers.

• There is no reward system for whistleblowers in place. • With regard to the involvement of key stakeholders, many

subjects were formally heard during the preparatory works of the law, including unions, industrial associations and civil society organisations.

11. Final notes • In 2015, whistleblower regulations specifically regarding the banking sector are implemented in accordance with the new EU Directive regarding financial institutions.240

• Transparency International Italy has set up an Advocacy and Legal Advice Centre (ALAC) in order to support Italian citizens with reporting corruption complaints. The centre offers free (and confidential) advice.241

239 This regards to a certain compliance programme. Companies are free to choose to implement this programme. Therefore, the implementation of internal reporting channels in the private sector is not fully covered. See: www.nortonrosefulbright.com/knowledge/publications/167206/whistleblowing-in-italy (last accessed 20 November 2018). 240 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Italy’ (2018). 241 See: https://www.transparency.it/alac/

49

16. LATVIA COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Currently, there is no stand-alone legislation dedicated to the protection of whistleblowers in the private or public sector.

• Currently, the only law that offers fragmented protection is the Labour Law.242

• Nevertheless, a national ‘Whistleblowing Law’ has been approved in October 2018 by the Latvian parliament. The Law will provide stand-alone legislation dedicated to the protection of whistleblowers and is expected to enter into force on 1 May 2019.243

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.244

3. Who are protected? The law does not offer protection to certain types of employees. 4. What types of

wrongdoing can be disclosed?

There is no list of wrongdoings that can be disclosed in order to receive protection.

5. Which bodies can receive/investigate disclosures?

• The Labour Law does not appoint a specific authority in order to receive and support disclosures of whistleblowers.

• Reports regarding corruption can be made to the Corruption Prevention and Combating Bureau, through a hotline.245

6. How can wrongdoings be disclosed?

The Labour Law does not address how to disclose wrongdoings.

7. What kind of protection does the law offer?

The Labour Law prohibits retaliation against employees based on their disclosure of wrongdoings.

8. How is the identity of whistleblowers protected?

The Labour Law does not protect the identity of whistleblowers, nor offers the possibility to disclose anonymously.

9. Does the law include remedies for whistleblowers?

The Labour Law does not include any remedies. However, in general, employees who feel victimized can go to court in order to be compensated.246 This process can take a long time and can turn out to be expensive.

10. Other relevant aspects • The Labour Law does not offer specific participation rights to whistleblowers nor establishes a reward system.

• There is no specific mention of the right to a fair hearing. • In addition, there is no specific involvement of stakeholders

in the design and/or periodic review of legislation dedicated to whistleblowers.

11. Final notes N/A

242 (Unofficial) translation: http://www.ilo.org/dyn/natlex/natlex4.detail?p_lang=en&p_isn=60599 (last accessed 4 November 2018). 243 See: https://www.mk.gov.lv/en/aktualitates/latvia-takes-important-step-towards-strengthening-whistleblower-protection (last accessed 11 March 2019). 244 The Labour Law includes employees. They are defined as natural persons who – based on an employment contract for an agreed remuneration – performs specific work under the guidance of an employer (chapter 1, section 2). 245 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Latvia’ (2018). 246 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Latvia’ (2018).

50

17. LITHUANIA COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Lithuania has not implemented stand-alone legislation dedicated to protect whistleblowers in the private and public sector. The most important laws are the Law on Public Administration and the Law on Banks.

• Other relevant laws and regulations are the government resolution no. 75 on remuneration for valuable information about the crime, resulting in property damage247 and the Guidelines on reporting potential infringements.248

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? Employees of banks. 4. What types of

wrongdoing can be disclosed?

• The Law on Public Administration defines ‘wrongdoings’ as ‘actions, omissions or administrative decisions of a public administration’.249

• With regard to the employees of banks, any breach of law can be disclosed.

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

• Citizens can report to all public administration bodies250 or to the Special Investigations Service’s Anti-Corruption Agency.

• Employees can disclose to their employers. 6. How can wrongdoings

be disclosed? • Citizens can report through disclosing channels of all public

administration bodies.251 • It is also possible that employees disclose to their employer

however, the law does not require employers to implement internal disclosure mechanisms, with the exception of financial sector under the Law on Banks. Nevertheless, there seems to be no (detailed) rules regarding the standards of such mechanisms.

• External disclosures can be made to the general hotline of the Special Investigations Service’s Anti-Corruption Agency.

7. What kind of protection does the law offer?

• Employees of banks are protected against retaliation in the workplace, discrimination and other unlawful or fraudulent behaviour.

• There is also a more general legal protection against unfair dismissal, not specifically related to whistleblowers.252

• The Law on Public Administration does not offers protection to whistleblowers. It does require good faith.253

247 Adopted on the 21st January 2013. However, it seems that the resolution, due to ethical norms, does not (yet) work in practice. See Transparency International Lithuania, Whistleblower Protection Assessment. Country Report Lithuania (2009), p. 5-6. 248 The guidelines do not mention whistleblowers specifically, but they to clarify reporting procedures in public institutions, see Transparency International, ‘Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Lithuania’, p. 2. 249 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 162. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 250 They are required to implement such channels based on the Law on Public Administration. 251 They are required to implement such channels based on the Law on Public Administration. 252 Transparency International, ‘Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Lithuania’ (October 2013), p. 2. 253 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 163. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

51

8. How is the identity of whistleblowers protected?

• The Law on Banks and the Law on Public Administration guarantee confidentiality.254

• The law does not accept nor prohibits, anonymous reporting. 9. Does the law include

remedies for whistleblowers?

The law does not provide any remedies for whistleblowers that are harmed because of their disclosure. However, it is possible to use alternative laws to seek for remedies, such as the Labour Law.

10. Other relevant aspects • The law does not offer participation rights to whistleblowers nor involve multiple actors with the drafting and review of legislation.

• The Government Resolution no. 75 offers a onetime reward that can be issued to a person who provides the relevant authorities with valuable information regarding financial crimes or crimes against the economic order. However, it is unclear how this system works in practice.

• The law does not offer a legal basis for a genuine day in court for whistleblowers.

• In addition, there is no specific involvement of stakeholders in the design and/or periodic review of legislation dedicated to whistleblowers.

11. Final notes N/A

254 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 163. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

52

18. LUXEMBOURG COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

Luxembourg has no stand-alone legislation dedicated to protect whistleblowers. The most relevant law for whistleblowers is the Law on Strengthening the Means to Fight Corruption, that covers the private and public sector, amending the Labour Code.255

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? Employees in both sectors who disclosed under Article L271(1) of the Labour Code.256

4. What types of wrongdoing can be disclosed?

The protection of employees covers illegal acts and criminal offences including corruption, influence peddling and illegal assets peddling.257

5. Which bodies can receive/investigate disclosures?

There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

6. How can wrongdoings be disclosed?

• In general, companies are not required to implement whistleblowing mechanisms. There is no general requirement to disclose internally before external disclosures can be made.258

• Employees can disclose to their superiors, other colleagues or any third party.259

• Disclosures are not protected under the legal framework if they are made to the media or the public.260

• All implemented whistleblowing mechanisms should comply with the rules set out by the Data Protection Act.

7. What kind of protection does the law offer?

• Employees are protected against workplace retaliation, according to article L.271-1(1) Labour Code.

• In addition, employees may not be subjected to reprisals for reporting or disclosing to a supervisor or the competent authorities (article L.271-1(2) Labour Code).

• The termination of an employment contract due to blowing the whistle is null and void (article L.271-1(3) Labour Code).

• Even though the disclosed corruption cannot be proved, the reporting employee receives protection as long as the disclosure was made in good faith.261

255 Adopted in 2011 with regard to the amendment of the Luxembourg Labour Code. (Unofficial) translation of the whistleblower provisions: https://www.whistleblower-rights.org/s/Luxembourg-Labor-Code-WBer-amendment-English.doc (last accessed 22 January 2019). 256 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 164. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).Also, see: https://www.lexology.com/library/detail.aspx?g=34ba0e2f-4229-4bcf-be8b-bda56b117598 (last accessed 19 November 2018). 257 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 164 See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 258 However, employers are advised to implement an internal whistleblowing policy and to set clear rules for their employees. Such policies should include the obligation for the employer to investigate the matter within a short period. In this context: Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 108 – 109. 259 See: https://www.lexology.com/library/detail.aspx?g=34ba0e2f-4229-4bcf-be8b-bda56b117598 (last accessed 2 November 2018). 260 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Luxembourg’ (2018). 261 See: http://www.labourlawnetwork.eu/national_labour_law/national_legislation/legislative_developments/prm/109/v__detail/id__1403/category__22/index.html (last accessed 2 November 2018).

53

• The burden of proof is reversed from the whistleblower to the employer.262

8. How is the identity of whistleblowers protected?

• In general, confidentiality must be guaranteed.263 • The legal framework does not accept nor prohibit,

anonymous disclosures. However, there need to be a balance between the rights of the whistleblower and rights of the person who is subjected to the disclosure. Therefore, anonymity is not guaranteed.264

• False statements can lift the protection of confidentiality of the whistleblower.265

9. Does the law include remedies for whistleblowers?

The law does not provide any remedies for whistleblowers that are harmed because of their disclosure. 266 However, whistleblowers can use alternative laws to seek remedies, such as the labour law. 267

10. Other relevant aspects • The law does not offer rights regarding participation for whistleblowers, such as a fair hearing.

• There is no reward system for whistleblowers in place. • There is no specific involvement of key stakeholders in the

design and/or periodic review of legislation dedicated to whistleblowers.

11. Final notes N/A

262 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 164. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 263 See: https://www.lexology.com/library/detail.aspx?g=34ba0e2f-4229-4bcf-be8b-bda56b117598 (last accessed 2 November 2018). 264 See: https://www.wildgen.lu/our-insights/article/whistleblowing-luxembourg (last accessed 2 November 2018). 265 See: https://www.lexology.com/library/detail.aspx?g=34ba0e2f-4229-4bcf-be8b-bda56b117598 (last accessed 2 November 2018). 266 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 164. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 267 Relevant: article L.271-1(4) Labour Code) and Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 110.

54

19. MALTA COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

In 2013, Malta implemented a stand-alone legal framework in order to protect whistleblowers addressing both the public and private sector, called “The Protection of the Whistleblower Act” (hereinafter: the Act).268

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? Any employee who makes a protected disclosure to a reporting officer or a competent body (article 2 of the Act). The range of covered employees is wide.269

4. What types of wrongdoing can be disclosed?

• A broad range of wrongdoings can be reported. It covers non-compliance with the law, endangering the health/safety of individuals or environmental damage, corruption and bribery, criminal acts, miscarriage of justice, etc.270

• The disclosure is protected if it is made in good faith and the whistleblower believes the disclosed information is substantially true, concerns improper practice and is not made for the purpose of personal gain (Part III, section 1, article 9 of the Act).

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

• Specific disclosures can be made to different bodies based on the nature of the disclosed wrongdoing, such as tax, money laundering and financial services (First Schedule of the Act).

• Each authority is required under the Act to set up a whistleblowing reports unit to receive external disclosures.

• With regard to the public administration (government), the designated authority is the “Whistleblowing unit” within the Government of Malta.

• In practice, each Ministry has designated an individual as the contact point for whistleblowing.271

6. How can wrongdoings be disclosed?

• Based on the Act, every employer must implement an internal procedure for receiving and dealing with information about improper practices committed within the organisation (Part III, section 2, article 12 of the Act).

• Internal disclosures can be made to a reporting officer. • External disclosures only qualify as protected if the

whistleblower has first disclosed internally or attempted to disclose internally (Part III, section 3, articles 15-18 of the Act).

268 In September 2013, the Maltese government has implemented the ‘Protection of the Whistleblower Act’. (Unofficial) translation: http://www.justiceservices.gov.mt/DownloadDocument.aspx?app=lp&itemid=25151&l=1 (last accessed 22 January 2019). 269However, members of the disciplined force, the Security Service and persons employed in the foreign, consular or diplomatic service of the Maltese government are excluded from protection based on the act, Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, pp. 165-166. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 270 See for a full list of all wrongdoings Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 165. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 271 A list of contact points and individuals can be found here: https://justice.gov.mt/en/justice/whistleblower/Pages/contact.aspx (last accessed 22 January 2019).

55

• External disclosures can also be made directly to the whistleblowing reports unit if the whistleblower believes on reasonable grounds that permitted circumstances as mentioned in the Act exist (e.g. urgency, risk of detriment, if the of the organisation is involved) (Part III, section 3, article 16).

• The Act lists the authorities prescribed to receive external disclosures in ‘the First Schedule’, for example the ‘Malta Financial Services Authority’ for entities operating in the financial sector (banks, insurance companies, investment intermediaries, etc.).

• The receiving officer is required to notify the whistleblower within a reasonable time about the status of the internal disclosure.272

7. What kind of protection does the law offer?

• Whistleblowers are protected against detrimental action for having made a protected disclosure (Part II, article 3).

• Whistleblowers who make a protected disclosure are also not liable to any civil, criminal and/or disciplinary proceedings for having made such disclosure (Part II, article 4(1)).

8. How is the identity of whistleblowers protected?

• The Act prohibits whistleblowing officers or units from disclosing information that identifies or may lead to the identification of the whistleblower, unless the whistleblower expressly consents in writing to the disclosure of that information (Part II, article 6 of the Act). This protection also extends to a prohibition of a court asking for disclosure of the identity of a whistleblowers’ identity without their consent (Part II, article 6(4)).

• Disclosures made anonymously are generally not protected (Part III, section 1, article 11).

• The Act prohibits (and includes penalties regarding) the use of violence and/or harmful behaviour to prevent a whistleblower from disclosing (Part IV, article 19);

• If whistleblowers knowingly provide false information, the disclosure qualifies as an offence punishable (calumnious accusations) (Part III, section 1, article 9).

9. Does the law include remedies for whistleblowers?

The law does not provide any remedies for whistleblowers that are harmed because of their disclosure. However, whistleblowers can use alternative laws to seek for remedies, such as the Civil Code.273

10. Other relevant aspects • The law does not offer rights regarding participation for whistleblowers, such as a follow-up or a fair hearing.

• There is no reward system for whistleblowers in place. • It is unclear whether there is specific involvement of key

stakeholders in the design and/or periodic review of legislation dedicated to whistleblowers.

11. Final notes The scope of the Act in relation to the private sector is limited to organisations that do not qualify as small and medium sized enterprises. This excludes a large proportion (over 99%) of Maltese private companies.274

272 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 168. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 273 For example, Whistleblowers can file an application to the civil court in order to receive a remedy for a detrimental action because of the protected disclosure (Part II). 274 See: https://www.jc.um.edu.mt/__data/assets/pdf_file/0008/183896/SMEs_Malta_and_EU.pdf (last accessed 4 November 2018).

56

20. THE NETHERLANDS COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• In 2016, the Netherlands implemented a stand-alone legal framework in order to protect whistleblowers, addressing both the public and private sector, called the ‘Whistleblowers Authority Act’ (hereinafter: “The Act”).275

• Another relevant regulation is the Corporate Governance Code, requiring private entities listed on the Dutch stock exchange to implement whistleblower procedures.

2. Definitions • The term ‘whistleblower’ is broadly defined in the Act and includes anyone who encounters an abuse through their work in the organisation where they currently work or formerly worked, whether or not with an employment contract or appointment.

• The term ‘whistleblowing’ is not defined by law. 3. Who are protected? • The Act offers protection to ‘employees’ in the public and

private sector who disclose presumed wrongdoing that may harm the public interest, and includes either 1) breaches of law, 2) danger to health, safety of people or the environment, or 3) improper acts or as a ground to claim these remedies.

• The Act refers to ‘employees’. This term is defined in a broad sense, including both a contractual and other working relationships. However, it does not specify or give examples of what this ‘other working relationship’ refers to precisely. Therefore, it remains unclear whether people who perform work outside a working contract (including self-employed workers, volunteers and trainees) receive legal protection.276

4. What types of wrongdoing can be disclosed?

Wrongdoing is defined as the suspicion of an abuse whereby the public interest is at risk. This involves dangerous, immoral or illegal practices which take place under the responsibility of the employer. Hence, only public concerns can be raised to the Dutch Whistleblowers Authority and this does not involve individual disputes such as an employment conflict between employer and employee.

5. Which bodies can receive/investigate disclosures?

The Dutch Whistleblowers Authority (Huis voor Klokkenluiders)277 is, according to the act, the designated body to investigate disclosures of alleged wrongdoing that may harm the public interest and retaliation against those who have disclosed it and to provide advice to whistleblowers.

6. How can wrongdoings be disclosed?

• The Act requires all public institutions and private entities with over 50 employees to implement an internal disclosing procedure.

• In principal, only after having made a disclosure internally, external disclosing to the competent authority is allowed. Employees can also request information, advice and support at the Whistleblowers Authority.

275 This Act is adopted on July 1st 2016. Translation: https://huisvoorklokkenluiders.nl/wp-content/uploads/2018/01/20160803_Wet-_Engelse-versie_BZK116131.pdf (last accessed 22 January 2019). 276 See: https://wetten.overheid.nl/BWBR0037852/2016-07-01/ 277 See: https://huisvoorklokkenluiders.nl/whistleblowers-authority-huis-voor-klokkenluiders-english/ (last accessed 11 March 2019).

57

7. What kind of protection does the law offer?

• The Act prohibits retaliation of the whistleblower when the disclosure has been made in good faith with a suspicion based on reasonable grounds. Until now, this does not apply to people who perform work outside a working contract (including self-employed workers, volunteers and trainees).278

• The Dutch law provides that whistleblowers can request for an investigation of alleged retaliation.

• The Act did not introduce a reversal of burden of proof, therefore, the whistleblower has to prove that he or she was retaliated as a result of the disclosure made.279

8. How is the identity of whistleblowers protected?

• In general, the confidentiality of the identity is guaranteed. The Whistleblowers Authority is only allowed to publish the identity with consent of the whistleblower.

• Anonymous reporting is not accepted. 9. Does the law include

remedies for whistleblowers?

• In general, the law does not provide any specific remedies for whistleblowers that are harmed because of their disclosure. However, there are several grounds (not specifically related to whistleblowers) for receiving remedies.

• The Dutch Whistleblowing Authority investigates retaliation claims. If the investigation indeed shows that retaliation has taken place as a result of the reporting act, whistleblowers can initiate a procedure to request compensating measures.

• Non-compliance, such as not implementing an internal reporting procedure, does not lead to sanctions and/or penalties of the employer.

• The Whistleblowers Authority can only make non-binding recommendations, such as reinstatement of the employee, that can be used in court.280

10. Other relevant aspects • If the Whistleblowers Authority investigates the disclosure and drafts a report, the employer and the applicant can provide written comments for a period of four weeks, starting from the day after the day on which the draft report was sent. They are obliged to maintain confidentiality of the report.

• There is no reward system for whistleblowers in place. 11. Final notes • Since its establishment, the Whistleblowers Authority has

faced many struggles and does not yet function adequately.281

• As a government agency, the Dutch Whistleblowers Authority might be perceived as part of the system, and hence in reality less independent than it should be in theory.

• Any conclusion or recommendation of the Dutch Whistleblowers Authority does establish legal liability; this is for a judge to decide.

278 See: https://www.transparency.nl/wp-content/uploads/2019/03/Reactie-Internetconsultatie-Motie-Bikker-TI-NL-6-maart-2019.pdf 279 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 169. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 280 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 169. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 281 See: https://www.transparency.nl/wp-content/uploads/2018/04/Brief-aan-Minister-BZK-HvK-2.0.pdf

58

21. POLAND COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Poland has not implemented stand-alone legislation dedicated to protect whistleblowers in the private or public sector

• Other relevant laws are the Banking Law; the Labour Code; the Criminal Code and the Code of Criminal Procedure.

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? Protection is only offered by the Law on Banks to employees of organisations within the banking sector.282

4. What types of wrongdoing can be disclosed?

The Law on Banks protects employees who disclose breaches.283

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

• Specific disclosures can be made to: - The State Labour Inspectorate; - The employment and/or administrative court; - The prosecutor’s office; - The Human Rights Ombudsman; - Online disclosure forms and hotlines.

6. How can wrongdoings be disclosed?

The Banking Law requires banks to set up internal disclosing mechanisms.284 However, (detailed) requirements regarding the standards of such mechanisms appear to be lacking.

7. What kind of protection does the law offer?

• There is no specific whistleblower protection mechanism in place. However, general protection is available including: - Protection against repressive actions, discrimination and

other types of unfair treatment.285 - Protection against unlawful acts of their employer,

resulting from the reporting of wrongdoing. - Protection against demotion, stripping of duties,

reduction of payment, unwanted transfer, discrimination and mobbing.

8. How is the identity of whistleblowers protected?

• In general, confidentiality is guaranteed and the internal disclosing mechanisms based on the Law on Banks are required to accept anonymous disclosures.286

• Whistleblowers may apply to be qualified as an anonymous witness. However, this qualification is only possible in a narrow range of circumstances.

282 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 170. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 283 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 170. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 284 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 170. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 285 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 170. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 286 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 170. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

59

9. Does the law include remedies for whistleblowers?

The law does not offer specific remedies to whistleblowers that are harmed because of their disclosure. However, whistleblowers can use alternative laws to seek for remedies, such as the Labour Law.

10. Other relevant aspects • The law does not offer rights regarding participation for whistleblowers, such as a follow-up or a fair hearing.

• There is no reward system for whistleblowers in place. • It is unclear whether there is specific involvement of key

stakeholders in the design and/or periodic review of legislation dedicated to whistleblowers.

11. Final notes The Competition and Consumer Protection Agency (UOKiK) has launched a hotline for whistleblowers as part of a pilot project.287

287 See: https://blog.eqs.com/are-whistleblowers-sufficiently-protected-in-europe/ (last accessed 19 October 2018).

60

22. PORTUGAL COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Portugal has not implemented stand-alone legislation to protect whistleblowers in the private or public sector.

• The available protection is derived from sectoral provisions in laws such as: Law 19/2008 (General tax law), the Labour code, Law 25/2008 (on money laundering and financing of terrorism), the Criminal Code, Law 59/2008 (on public officials and civil servants) and the Decree-Law 298/92.288

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? • Employees in both the private and public sector. • Employees of financial institutions and civil servants are

protected if they disclose information through a whistleblower mechanism and the disclosure is made in good faith.289

4. What types of wrongdoing can be disclosed?

Due to the restrictions of the internal whistleblower policies, only disclosures regarding persons in the management can be made.290 In addition, disclosures can only concern accounting, internal accounting controls, auditing, corruption and financial crimes.291

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

• Specific offences such as corruption and fraud can be disclosed to the Public Prosecutor’s Office.292

6. How can wrongdoings be disclosed?

• Credit institutions are required to implement internal reporting mechanisms in order to receive disclosures concerning breaches of Regulation 575/2013.293

• External disclosures are not regulated. 7. What kind of

protection does the law offer?

• There is no specific protection mechanism concerning whistleblowers in place. However, protection can be derived from alternative laws including: - Protection against being harmed due to a disclosure

(article 4, Law 19/2008). The protection is limited to 1 year after the reporting date.

- Protection against disciplinary sanctions by the employer. Such sanctions occurring within 1 year after the disclosure will be presumed abusive (article 4, Law 19/2008).

288 This legal framework together covers part of the public and part of the private sector. 289 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 171. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 290 World Law Group, Global Guide to Whistleblowing Programs (2016), p. 142. 291 Norton Rose Fulbright, A global guide to whistleblowing laws (2014) p. 121. 292 See: http://ec.europa.eu/regional_policy/sources/conferences/anti_corruption/lisbon/whistleblowing_marques.pdf (last accessed 22 January 2019). 293 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 171. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

61

• Regarding corruption, the burden of proof is reversed in both the private and the public sector, meaning that it lies with the employer.294

8. How is the identity of whistleblowers protected?

• Confidentiality is only guaranteed if corruption within credit institutions (in both private and public sector) is disclosed.295

• The Law 19/2008 states that an employee who files a report concerning wrongdoing enjoys the right to confidentiality, but only until a criminal prosecution is filed against those who have been implicated in the wrongdoing. After this, the confidentiality of the whistleblower expires.

• Criminal sanctions may be imposed for those who reveal the identity of whistleblowers disclosing money laundering or terrorism.296

• Anonymous disclosures are not specified in legislation, although some entities (including the Central Department for Investigation and Penal Action of the Public Prosecutor’s Office) allow anonymous disclosure. According criminal procedure laws, the Public Prosecutor’s Office is obliged to follow up on disclosures of potential wrongdoing, even if they are provided anonymously.

• Although Law 19/2008 provides for a number of protections to be extended to public and private sector employees, no penalties are in place to punish employers who do not respect such provisions.

9. Does the law include remedies for whistleblowers?

• If the employee is unfairly dismissed (and the dismissal is judicially challenged), the employee can choose between being reinstated in the company or receiving compensation.297

• The compensation corresponds with 15 to 45 days of salary for each year of employment, with a minimum of three months of salary.

• In regard to both remedies, the employee is entitled to the salary which he/she would have received if the unfair dismissal had not taken place.

10. Other relevant aspects • Whistleblowers need to be informed regarding the processing of data concerning their disclosure.298 However, more specific rights to participation or the right to a fair hearing are not mentioned in the law.

• There is no reward system for whistleblowers in place. • There is no specific involvement of key stakeholders in the

design and/or periodic review of legislation dedicated to whistleblowers.

11. Final notes • The abuse of whistleblower systems may result in civil liability and/or disciplinary sanctions such as dismissal.299

294 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 172. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 295 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 172. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 296 See: http://ec.europa.eu/regional_policy/sources/conferences/anti_corruption/lisbon/whistleblowing_marques.pdf (last accessed 4 November 2018). 297 Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 123. 298 Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 122. 299 Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 122.

62

23. ROMANIA COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

In 2004, Romania implemented stand-alone legislation dedicated to protect whistleblowers. This legal framework regards the public sector and is called: ‘Law on the Protection of Public Officials Complaining about Violations of the Law’ (hereafter: “the Law”) .300

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by the Law.

3. Who are protected? The person making a disclosure in accordance with paragraph a) and which is classified in one of the public authorities, public institutions or other units set forth in article 2 (article 3). Therefore, protection is limited to permanent and temporary employees in the public sector.301

4. What types of wrongdoing can be disclosed?

The disclosure can be made regarding several types of wrongdoings (article 5) including corruption, fraud, nepotism and discriminating treatment.

5. Which bodies can receive/investigate disclosures?

• Several authorities, depending on the nature of the disclosure, are appointed to receive disclosures (article 6).

• The appointed authorities both regard internal (manager of the involved public authority) and external disclosures (article 6).

6. How can wrongdoings be disclosed?

In general, public employers are not required to implement internal whistleblowing mechanisms. There is no general requirement to disclose internally before external disclosures can be made, for example to the media. 302

7. What kind of protection does the law offer?

• There is no specific protection mechanism concerning whistleblowers in place. The law does offer the court to declare disciplinary and/or administrative sanctions, taken by the employer due to the disclosure, void (article 9).303 It is important to note that this is only the case if the disclosure was made in good faith and in the public interest.

• The good faith of the whistleblower is assumed (article 7); • Witness protection can be enforced ex officio (article 8); • The burden of proof is reversed and therefore lies on the

employer instead of on the employee.304 8. How is the identity of

whistleblowers protected?

• Confidentiality is guaranteed. 305 • The legal framework does not accept nor prohibit

anonymous disclosures. 300 (Unofficial) translation: http://www.whistleblowing.it/Romanian%20Law%20571-2004%20-%20whistleblowingEN.pdf (last accessed 2 November 2018). 301 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 173. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 302 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 173. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 303 Also: Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 172. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 304 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 173. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 305 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 173. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

63

9. Does the law include remedies for whistleblowers?

The law does not provide any remedies for whistleblowers that are harmed due to their disclosure. However, whistleblowers can use alternative laws to seek for remedies, such as the Labour Law.

10. Other relevant aspects • The law does not offer rights regarding participation for whistleblowers, such as a follow-up or a fair hearing.

• There is no reward system for whistleblowers in place. • It is unclear whether there is specific involvement of key

stakeholders in the design and/or periodic review of legislation dedicated to whistleblowers.

11. Final notes Transparency International Romania has established an Anti-Corruption Assistance Centre (ALAC) in order to receive disclosures of corruption and other wrongdoings and support whistleblowers. The centre also offers legal advice and protection from retaliation.306

306 Blueprint for Free Speech, ‘Whistleblower Protection in Southeast Europe. An Overview of Laws, Practice and Recent Initiatives’ (2015), p. 55.

64

24. SLOVAKIA COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

In 2014, Slovakia implemented stand-alone legislation dedicated to protect whistleblowers in the public and private sector. This law is called: ‘The Act on Certain Measures Related to the Reporting of Anti-social Activities’ (hereinafter: “the Act”).307

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? Employees from the private and public sector.308 4. What types of

wrongdoing can be disclosed?

The Act refers to ‘anti-social activity’, covering misconduct at the workplace, criminal offences and administrative offences.309

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers.

• Specific disclosures can be made to: - The public prosecutor (disclosing a serious anti-social

activity that constitutes a criminal offence); - The Labour Inspectorate.310

6. How can wrongdoings be disclosed?

• All public and private sector employers with at least 50 employees are required to designate a department or person to receive disclosures (article 1, section 11). Furthermore, this department/person needs to issue internal rules on making disclosures.

• Even though there is a requirement to implement an internal whistleblowing channel, there is no general requirement to disclose internally before an external disclosure can be made to the prosecutor and/or labour inspectorate.311

• Internal disclosures must be handled within ninety days.312 The receiving body must inform the whistleblower within ten days after the final decision.313

7. What kind of protection does the law offer?

• The protection is limited to the workplace; whistleblowers can request protection by the prosecutor. If the prosecutor or court determines that he/she is a whistleblower and

307 (Unofficial) translation: https://www.whistleblower-rights.org/s/Slovakia-Act-on-certain-measures-concerning-the-reporting-of-antisocial-activities-2014.doc (last accessed 22 January 2019). 308 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 174. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). Also relevant: the act refers to ‘reporting’: the disclosure of matters of which a natural person learnt in connection with the performance of their employment, profession, position or office and which may make or have made a significant contribution to the clarifying of a serious antisocial activity or identification and conviction of the offender (article 1, section 2). 309 For a full list of the types of wrongdoings, see Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 174. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 310 Article 1, section 3 and Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 174. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 311 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 174. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 312 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 174. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 313 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 175. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

65

protection should be granted, the whistleblower and the Labour Inspectorate are being notified (article 1, section 4).

• If protection is granted by the prosecutor, court or state body in administrative proceedings, the employer can take legal action or make a legal decision against the employee related to his or her employment only with the approval of the Labour Inspectorate (article 1, section 7).314

• Requests for the protection can also be filed with a court, when the criminal proceeding is in the phase of the court proceeding (a request for protection can be filled with the prosecutor in the pre-trial or investigation phase of a proceeding, before the prosecutor indicts the defendant (article 1, section 3). Requests for protection in connection with the disclosure of a serious anti-social activity that constitutes an administrative offence can be filed with the state body responsible for the administrative proceeding (article 1, section 5 and 6).

8. How is the identity of whistleblowers protected?

• Confidentiality of the whistleblower should be guaranteed within internal disclosing channels (article 1, section 11).

• Anonymous internal disclosing is accepted (article 1, section 2 and 12).

9. Does the law include remedies for whistleblowers?

A whistleblower can be granted a fee if a ruling rendered in criminal or administrative proceedings becomes final by which the offender was convicted of a criminal offence or commission of an administrative offence (article 1, section 9).

10. Other relevant aspects • The law does not offer rights regarding participation for whistleblowers, such as a follow-up or a fair hearing.

• The law includes the possibility of a financial reward for whistleblowers.315

• There is no specific involvement of key stakeholders in the design and/or periodic review of legislation concerning whistleblowers.

11. Final notes • The law does not include any sanctions or penalties relating to whistleblowing. However, such consequences can derive from alternative laws such as the Criminal Code.316

• Legislative changes were prepared in 2018 and the proposal of those changes should be presented to the government after a public consultation of the Act on whistleblower protection. Transparency International Slovakia advocates for setting up an independent state body responsible for whistleblower protection and legal changes that would allow whistleblowers to have specific rights in legal procedures.

314 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 174. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 315 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 174. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 316 For example, as any reporter of the crime, in the case of false accusations against a third person, the whistleblower may be charged in criminal proceedings (false accusation crime)

66

25. SLOVENIA COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Slovenia has no stand-alone legislation dedicated to protect whistleblowers in the public and private sector. The most important law with regard to protecting whistleblowers is the ‘Integrity and Prevention of Corruption Act’ (hereafter “the Act”).317

• Other relevant laws and regulations are the Civil Servants Act and the Code of Ethics. Both are relevant for employees from the public sector.

2. Definitions • The Act defines whistleblowers as ‘reporting persons’ (articles 24 and 25) and the Act refers to ‘any person’ (article 23, par 1. of the Act).

• The term ‘whistleblowing’ is not defined by law. 3. Who are protected? All citizens disclosing corruption or any employee from the public

sector disclosing unethical or illegal activity.318 4. What type of

wrongdoing can be disclosed?

Disclosures can be made regarding corruption (by all citizens), illegal or unethical conduct or any form of psychological or physical violence (by public officials).319

5. Which bodies can receive/investigate disclosures?

The Anti-Corruption Commission is appointed to receive and investigate disclosures.

6. How can wrongdoings be disclosed?

• There is a limited requirement for employers to implement an internal whistleblowing mechanism.320

• Officials who have grounds to believe that illegal or unethical conduct is required from him/her, may disclose this to the competent person (article 24, par. 1 of the Act).

• If the competent person fails to respond or is involved, the disclosure can be made to the Anti-Corruption Commission (article 24, par. 2 of the Act).321

7. What kind of protection does the law offer?

• The protection is limited to the workplace.322 • In case retaliatory measures and adverse consequences are

taken against employees due to their disclosure, the employee can demand reimbursement of caused damage (article 25, par 1. of the Act).

• It is possible to receive witness protection (article 23, par. 6 of the Act).

317 (Unofficial) translation: http://www.regulatelobbying.com/images/Slovenia_Lobbying_Law-3.pdf (last accessed 22 January 2019). 318 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 176. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 319 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 176. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 320 Linklaters, Whistleblowing: the European Landscape’ (PowerPoint), page 3. 321 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 176. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 322 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 176. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

67

• In the public sector, whistleblowers can be transferred to another position within the same organisation.323

8. How is the identity of whistleblowers protected?

• Confidentiality is guaranteed if the disclosure was made in good faith, which is to be determined by the Anti-Corruption Commission (article 23, par. 4 of the Act).

• Disclosures to the Anti-Corruption Commission can be made anonymously (article 39, Rules of Procedure of the Commission for the Prevention of Corruption, 2012).324

• The Act includes penalties for malicious disclosures (article 77) and employers who retaliated against employees.325

9. Does the law include remedies for whistleblowers?

• If the person disclosing has been exposed to retaliatory measures and adverse consequences have occurred, he/she has the right to demand reimbursement of illegally caused damage from the employer (article 25, par. 1 of the Act).

• The employer retaliating against an employee can be fined.326

10. Other relevant aspects • In general, the law does not offer rights regarding participation for whistleblowers, such as a follow-up or a fair hearing. However, the Anti-Corruption Commission is required to notify whistleblowers about the actions that are being taken.

• There is no reward system for whistleblowers in place. • There is no specific involvement of key stakeholders in the

design and/or periodic review of legislation dedicated to whistleblowers.

11. Final notes Transparency International Slovenia established an Advocacy and Legal Advice Centre (ALAC) in order to receive disclosures of whistleblowers.

323 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 176. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 324 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 176. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 325 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 176. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 326 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 176. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

68

26. SPAIN COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• Spain has no stand-alone legislation dedicated to the protection of whistleblowers. Available protection can be found in fragmented regional laws, affecting Castilla y León, Balearic Islands, and Valencia, called: Law 2/2016, Law 16/2016 and Law 11/2016, addressing the public sector.

• Also relevant can be the Real Decreto-ley 11/2018, de 31 de agosto (Anti-Money Laundering) and the Criminal Prosecution Law.

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.327

3. Who are protected? On a national level, no one is protected. At the regional levels only civil servants are protected.328

4. What types of wrongdoing can be disclosed?

• In the regions of the Balearic Islands and Valencia corruption in the public administration can be disclosed.

• In Castilla y León, a wider range of wrongdoing can be disclosed, including bribery, influence peddling, abuse in the exercise of the function of public officials and embezzlement.329

5. Which bodies can receive/investigate disclosures?

• There is no overarching body/authority appointed to receive and investigate disclosures made by whistleblowers.

• Specific disclosures can be made to: - The General Inspection of Services (Castilla y León). - The regional Ombudsman (Castilla y León). - Regional agencies (Balearic Islands, Valencia).

• The Spanish government set up an e-mail hotline that allows citizens to (anonymously) disclose anti-competitive behaviour.330

6. How can wrongdoings be disclosed?

In general, companies are not required to implement whistleblowing mechanisms.331 There is no general requirement to report internally before external disclosures can be made.332

7. What kind of protection does the law offer?

• There is no general protection mechanism concerning whistleblowers in place. Since there is no national protection available, the nature of the protection differs per region.333 - In Castilla y León, whistleblowers are offered protection

against acts that harm the relationship between the whistleblower and the employer or their working

327 According to relevant case law, ‘whistleblowers’ are employees (or supply chain, or citizens, or any other stakeholder, depending if we are talking about companies or public agencies, according to the Country Expert, Transparency International Spain. 328 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 178. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 329 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 178. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 330 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Spain’ (2018). 331 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 178. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 332 However, if they choose to implement one, requirements of the Spanish Data Protection Act need to be met, according to Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 128. 333 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 178. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

69

conditions. The protection lasts for a year after the procedure has been concluded.

- On the Balearic Islands, whistleblowers are protected against any harm to his/her rights.

- In Valencia, whistleblowers are protected against isolation, persecution/worsening of the working conditions and against any measure that can lead to prejudice or discrimination.334 Whistleblowers can also request to be moved within the organisation or to receive a paid leave. This protection can be extended.

• Spanish courts have used protection derived from the rights of freedom of expression and information as a legal basis to offer protection to whistleblowers.335

• Whistleblowers are protected from dismissal and detriment.336

8. How is the identity of whistleblowers protected?

• Confidentiality is guaranteed in all regions. This guarantee ends a year after the end of the procedure in Castilla y León.337

• Regarding internal reporting, anonymous reports will most likely not be accepted.338

9. Does the law include remedies for whistleblowers?

The law does not offer specific remedies for whistleblowers. However, whistleblowers can use alternative laws to seek for remedies including the Labour Law.

10. Other relevant aspects • In general, the law does not offer rights regarding participation for whistleblowers, such as a follow-up or a fair hearing.

• There is no reward system for whistleblowers in place. • Multiple stakeholders, such as NGOs and whistleblowers,

are involved in drafting proposals to secure whistleblower rights. 339 Transparency International Spain is also advocating for whistleblower legislation.340

11. Final notes Currently, a draft law regarding whistleblower protection is being reviewed.341

334 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 178. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 335 Norton Rose Fulbright, A global guide to whistleblowing laws, p. 127. 336 Judgement of the Constitutional Court of 21 January 1988 and 12 April 1999, according to Norton Rose Fulbright, A global guide to whistleblowing laws, p. 129. 337 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 178. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 338 Norton Rose Fulbright, A global guide to whistleblowing laws, p. 128. 339 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 177. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 340 See: https://transparencia.org.es/wp-content/uploads/2017/04/position_paper_proteccion_denunciantes.pdf (last accessed 22 January 2019). 341 Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Spain’ (2018.

70

27. SWEDEN COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

• In 2016, Sweden implemented stand-alone legislation dedicated to protect whistleblowers. This law is called The Whistleblower Act (SFS 2016:749; hereinafter “The Act”). 342

• Another relevant act for the protection of whistleblowers is the Freedom of Press Act.

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? In the public sector, all employees are protected. In the private sector, protection is granted to employees excluding self-employed individuals (or contractors).343

4. What types of wrongdoing can be disclosed?

Offences for which the range of penalties includes imprisonment or comparable irregularities are protected. This includes corruption, economic crimes, violation of fundamental rights and freedoms, any risk to life/safety or health and the misuse of public funds. In disclosing them, concrete suspicions of wrongdoing are sufficient (section 1 of the Act).344

5. Which bodies can receive/investigate disclosures?

There is no overarching body/authority appointed to receive and investigate disclosures by whistleblowers. The Act itself refers to ‘contacting a public body’ but does not specify which body can receive such a disclosure (section 7 of the Act).

6. How can wrongdoings be disclosed?

• Employees are protected if the disclosure concerns irregularities and the disclosure was made to the employer or a representative of the employer (section 5 of the Act), or make use of the internal procedure for the disclosure of irregularities, provided by the employer (section 5 of the Act). Disclosures are also protected if the employee disclosed to the employee organisation (section 6 of the Act).

• Disclosures can be made to a public authority (section 7 of the Act), if: - The whistleblower is a worker; and - The disclosure was first made internally and the

employer did not take appropriate action or there is another reason to justify external reporting; and

- The worker has grounds for the claim of serious irregularities.

• Information can also be disclosed to journalists, the media and news agencies (Freedom of Press Act).345

342 (Unofficial) translation: https://www.government.se/4a9faa/contentassets/8eaf2765387e4c18940baee2ca4d461c/sfs-2016749-act-on-special-protection-for-workers-against-reprisals-for-whistleblowing-concerning-serious-irregularities (last accessed 2 November 2018). 343 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 180. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). A ‘worker’ is defined as: employees and those performing work as temporary agency employees if the irregularities reported refer to conditions in the activities of the hiring company. In such cases, the hiring company is to be considered the employer (section 2 Whistleblower Act). 344 For a comprehensive list of the wrongdoings, see Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 180. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 345 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 181. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

71

7. What kind of protection does the law offer?

• An employer may not subject a worker to reprisals due to the worker disclosure of serious irregularities relating to the employer’s activities (section 4 of the Act).346

• An agreement is invalid to the extent that it revokes or limits a worker’s protection under the Act (section 3 of the Act).

• The burden of proof lies with the employer (section 10 of the Act).

• Disclosures must be made in good faith.347 8. How is the identity of

whistleblowers protected?

• There is no general guarantee of confidentiality.348 At least, the media is required to protect the identity of the person who disclosed the information. 349 However, this guarantee of confidentiality will be lifted if the whistleblower intentionally commits severe crimes against national security/the state, discloses classified official documents or breaches duties of confidentiality mentioned in Chapter 156 of the Public Access to Information and Secrecy Act (2009/400)

• Internal anonymous disclosing is accepted.350 • An employee who becomes guilty of an offence by disclosing

irregularities is not protected (section 8 of the Act). 9. Does the law include

remedies for whistleblowers?

An employer who breaches the prohibition of retaliation due to the employee disclosing serious irregularities (section 4 of the Act), must pay damages for the loss incurred and for the violation the reprisal entails (section 9 of the Act).351

10. Other relevant aspects • The law does not grant specific rights regarding participation for whistleblowers, such as a follow-up or a fair hearing. It only mentions that whistleblowers can take their case to the Labour Court (section 11 of the Act).

• There is no reward system for whistleblowers in place. • It is unclear whether there is specific involvement of key

stakeholders in the design and/or periodic review of legislation, dedicated to whistleblowers.

11. Final notes N/A

346 A person who has the right to make decisions on the employer’s behalf in matters concerning the worker shall be equated with the employer in the application of the first paragraph. 347 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 181. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 348 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 181. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 349 See: https://www.lexology.com/library/detail.aspx?g=0e67ed39-9850-4f71-8f47-b7c091325e67 (last accessed 12 October 2018). 350 See: https://www.lexology.com/library/detail.aspx?g=0e67ed39-9850-4f71-8f47-b7c091325e67 (last accessed 12 October 2018). 351 If legal action is taken on the basis of notice of termination or summary dismissal, or any other procedure covered by the Employment Protection Act (1982:80), compensation for losses in respect of the period following the cessation of employment may not, under any circumstances, exceed the amount specified in Section 39 of that Act (section 9).

72

28. UNITED KINGDOM (UK) COUNTRY RATING

1. What legislation is relevant to protect whistleblowers?

In 1998, The UK implemented an act dedicated to the protection of whistleblowers in both the private and the public sector, called the Public Interest Disclosure Act (hereinafter: PIDA).352

2. Definitions The terms ‘whistleblower’ and ‘whistleblowing’ are not defined by law.

3. Who are protected? All employees in the public and private sector are protected. This includes trainees, agency workers, self-employed individuals (contractors) and temporary employees.353

4. What types of wrongdoing can be disclosed?

• Protection is granted to protected/qualifying disclosures, including any disclosure of information, which in the reasonable belief of the worker making the disclosure tends to show one or more of the following: - That a criminal offence has been committed, is being

committed or is likely to be committed; - that a person has failed, is failing or is likely to fail to

comply with any legal obligation to which he is subject; - that a miscarriage of justice has occurred, is occurring or

is likely to occur. (section 1, 43B PIDA).354 5. Which bodies can

receive/investigate disclosures?

There is no overarching body/authority appointed to receive and investigate disclosures made by whistleblowers. The guidance on the PIDA does provide for a list of specific prescribed people and bodies to whom workers cam make appropriate disclosures.355

6. How can wrongdoings be disclosed?

• In general, companies are not required to implement whistleblower mechanisms. There is no general requirement to disclose internally before external disclosures can be made.

• Disclosures can be made to the employer or a prescribed person (section 1, 43C PIDA).

• Disclosure also can be made to a legal adviser (section 1, 43D PIDA), the Minister of the Crown (section 1, 43E PIDA) or to a prescribed person (section 1, 43F PIDA).

• Disclosures to the media can lift whistleblowing law rights, including protection.356

7. What kind of protection does the law offer?

• The Act offers protection against workplace retaliation and offers interim relief procedures.357

352 See: https://www.legislation.gov.uk/ukpga/1998/23/pdfs/ukpga_19980023_en.pdf (last accessed 12 March 2019). The Act took effect in July 1999 and was last amended in 2013. 353 The term ‘workers’ means anyone who is an employee, a trainee, an agency worker or a member of a limited liability partnership, according to https://www.gov.uk/whistleblowing (last accessed 22 January 2019). See also: Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 182. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 354 For an enumerative list of wrongdoings, see Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 182. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 355 See: https://www.gov.uk/government/publications/blowing-the-whistle-list-of-prescribed-people-and-bodies--2 (last accessed 12 March 2019) 356 See: https://www.gov.uk/whistleblowing/who-to-tell-what-to-expect (last accessed 22 January 2019). 357 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 182. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019).

73

• In order to receive protection, the disclosure needs to be made in accordance to the conditions connected to the person/body to where the disclosure has been made (section 1, 43C-43G PIDA). Also, the disclosure needs to be made with reasonable belief that it is in the public interest.358

• An employee has the right not to be subjected to any detriment by any act, or any deliberate failure to act, by his employer done on the ground that the employee has made a protected disclosure (section 1, 47B PIDA).

• An employee who is dismissed shall be regarded as unfairly dismissed if the reason (or, if more than one, the principal reason) for the dismissal is that the employee made a protected disclosure (section 5 PIDA).

• There is no reversal of the burden of proof from the whistleblower to the employer.359

8. How is the identity of whistleblowers protected?

• Whistleblowers can request confidentiality when making the disclosure.360

• In general, it is accepted to disclose anonymously. However, it is possible that the disclosure can only be ‘taken further’ if all information needed is provided. 361

• Also, according to the UK government, it can be found harder to prove that unfair treatment is a result of whistleblowing.362

9. Does the law include remedies for whistleblowers?

The law does not offer specific remedies to whistleblowers that are harmed because of their disclosure. However, there are several grounds (not specifically regarding whistleblowers) to receive remedies, for example based on dismissals.363

10. Other relevant aspects • The law does not offer specific rights regarding participation for whistleblowers, such as a follow-up or a fair hearing. 364 An employee may present a complaint to an employment tribunal that he has been subjected to a detriment in contravention of section 47B (section 2 PIDA).

• There is no reward system for whistleblowers in place. • There is no specific involvement of key stakeholders in the

design and/or periodic review of legislation dedicated to whistleblowers.

11. Final notes The ‘Advisory, conciliation and Arbitration Service’365 and the charity ‘Protect’366 can be contacted for further guidance and advice on making a disclosure.

358 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 183. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 359 Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 183. See: https://ec.europa.eu/info/sites/info/files/1-11_annexes.pdf (last accessed 11 February 2019). 360 See: https://www.gov.uk/whistleblowing/who-to-tell-what-to-expect (last accessed 22 January 2019). See also: Annex 6: Member States’ legislative framework to the European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, p. 183. 361 See: https://www.gov.uk/whistleblowing/who-to-tell-what-to-expect (last accessed 22 January 2019). 362 See: https://www.gov.uk/whistleblowing/treated-unfairly-after-whistleblowing (last accessed 22 January 2019). 363 See: https://www.gov.uk/browse/working/redundancies-dismissals (last accessed 22 January 2019). 364 See: https://www.gov.uk/whistleblowing/who-to-tell-what-to-expect (last accessed 22 January 2019). 365 See: http://www.acas.org.uk/index.aspx?articleid=4489 (last accessed 12 March 2019) 366 See: https://www.pcaw.org.uk/ (last accessed 17 January 2019).

74

ANNEX 1 – TI PRINCIPLES FOR WHISTLEBLOWER LEGISLATION Indicator Description

1. Broad definition of whistleblowing

Whistleblowing is the disclosure or reporting of wrongdoing including (but not limited to) corruption; criminal offences; breaches of legal obligation; miscarriages of justice; specific dangers to public health; environmental hazards; abuse of authority; unauthorised use of public funds or property; gross waste or mismanagement; conflict of interest and acts to cover up any of the wrongdoings mentioned.

2. Broad definition of whistleblower

A whistleblower is any public or private sector employee or worker who discloses information about a concern of wrongdoing. This also includes individuals outside the traditional employee-employer relationship, such as consultants, contractors, trainees/interns, volunteers, student employees, temporary employees and former employees.

3. Protection from retribution

Individuals shall be protected from all forms of retribution, disadvantage or discrimination at the workplace, linked to/resulting from whistleblowing. This includes all types of harm, including dismissal, probation and other job sanctions; punitive transfers; harassment; reduced duties or hours; withholding or promotions or training; loss of status and benefits and threats of such actions.

4. Internal reporting mechanism

Whistleblower regulations and procedures should be highly visible and understandable; maintain confidentiality or anonymity; ensure thorough, timely and independent investigations of the disclosures and have transparent, enforceable and timely mechanisms to follow up on retaliation complaints of the whistleblower. If reporting at the workplace does not seem practical or possible, individuals may make disclosures to regulatory or oversight agencies or individuals outside their organisation. These channels may include regulatory authorities, law enforcement or investigative agencies, elected officials or specialised agencies established to receive such disclosures.

5. External reporting mechanism

In cases of urgent or grave public or personal danger or persistently unaddressed wrongdoing that could affect the public interest, individuals shall be protected for disclosures made to external parties such as the media, civil society organisations, legal associations, trade unions or business/professional organisations. Furthermore, a wide range of accessible disclosure channels and tools should be made available to employees and employees of government agencies and publicly traded companies, including advice lines, hotlines, online portals, compliance offices and external ombudsman’s. Mechanisms shall be provided for safe, secure confidential or anonymous disclosures.

6. Whistleblower participation

As informed and interested stakeholders, whistleblowers shall have meaningful opportunities to provide input to subsequent investigations or inquiries. Whistleblowers shall have the opportunity to clarify their complaint and provide additional information or evidence. They also have the right to be informed of the outcome of any investigation or finding and to review and comment on any results.

75

7. Rewards system If appropriate within the national context, whistleblowers may receive a portion of any funds recovered or fines levied as a result of the disclosure. Other rewards or acknowledgements may include public recognition or awards, employment promotion or an official apology of retribution.

8. Protection of confidentiality

The protection of confidentiality means that the identity of the whistleblower may not be disclosed without the individual’s explicit consent.

9. Anonymous reports accepted

Full protection should be granted to whistleblowers who have disclosed information anonymously and who subsequently have been identified without their explicit consent.

10. Whistleblowers complaints authority

An independent body or bodies shall receive and investigate complaints of retaliation and improper investigations of whistleblower disclosures. The agency may issue binding recommendations and forward relevant information to regulatory, investigative or prosecutorial authorities for follow-up. The agency shall also provide advice and support, monitor and review whistleblower frameworks, raise public awareness to encourage the use of whistleblower provisions and enhance cultural acceptance of whistleblowing. The agency shall be provided with adequate recourses and capacity to carry out these functions.

11. Genuine day in court Right to a fair hearing

Whistleblowers who believe their rights have been violated are entitled to a fair hearing before an impartial forum with full right of appeal. Decisions shall be timely, whistleblowers may call and cross-examine witnesses and rules of procedures must be balanced and objective.

12. Full range of remedies

A full range of remedies must cover all direct, indirect and future consequences of any reprisals, with the aim to make the whistleblower whole. This includes interim and injunctive relief; attorney and mediation fees; transfer to a new department or supervisor; compensation for lost past, present and future earnings and status; and compensation for pain and suffering. A fund to provide assistance for legal procedures and support whistleblowers in serious financial need should be considered.

13. Penalties for retaliation

Any act of reprisal for, or interference with, a whistleblowers disclosure shall be considered misconduct, and perpetrators of retaliation shall be subject to employment/professional sanctions and civil penalties.

14. Involvement of key stakeholders

The design and periodic review of whistleblowing laws, regulations and procedures must involve key stakeholders including employee organisations, business/employer associations, civil society organisations and academia.

76

ANNEX 2 – RATED RESEARCH FINDINGS

MEMBER STATE INITIAL POINTS EXTRA POINTS TOTAL COUNTRY

ASSESSMENT 1. Austria 17 0 17 Weak protection 2. Belgium 20 0 20 Weak protection 3. Bulgaria 10 0 10 Weak protection 4. Croatia 20 25 45 Weak protection 5. Cyprus 13 0 13 Weak protection 6. Czech Republic 17 0 17 Weak protection 7. Denmark 22 0 22 Weak protection 8. Estonia 15 25 40 Weak protection 9. Finland 10 0 10 Weak protection 10. France 77 50 127 Strong protection 11. Germany 20 0 20 Weak protection 12. Greece 13 0 13 Weak protection 13. Hungary 33 50 83 Medium Protection 14. Ireland 71 50 121 Strong protection 15. Italy 63 50 113 Strong protection 16. Latvia 17 0 17 Weak protection 17. Lithuania 13 0 13 Weak protection 18. Luxembourg 15 25 40 Weak protection 19. Malta 55 50 105 Strong protection 20. Netherlands 65 50 115 Strong protection 21. Poland 17 0 17 Weak protection 22. Portugal 10 25 35 Weak protection 23. Romania 10 25 35 Weak protection 24. Slovakia 45 50 95 Medium Protection 25. Slovenia 42 0 42 Weak protection 26. Spain 3 0 3 Weak protection 27. Sweden 42 50 92 Medium Protection 28. United Kingdom 47 50 97 Strong protection

77

ANNEX 3 – DESK RESEARCH REFERENCES Austria • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 136 – 138,184.

• Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 73-74. • OECD, Committing to Effective Whistleblower Protection, OECD Publishing, Paris (2016),

p. 6. • Shahanaz Müller, Providing an Alternative to Silence: Towards Greater Protection and

Support for Whistleblowers in the EU. Country report: Austria, (2012). • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 9 – 11. • Consulted website:

- https://www.bkms-system.net/bkwebanon/report/clientInfo?cin=1at21&language=ger Belgium • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 138 – 140, 184 – 185.

• Wim Vandekerckhove, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country report: Belgium (2013).

• OECD, Committing to Effective Whistleblower Protection, OECD Publishing, Paris (2016), p. 6.

• Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 74-77. • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 12 – 15. • Consulted websites:

- http://www.vlaamseombudsdienst.be/ombs/nl/nieuws/pdf/20140509_klokkenluidersprotocol.pdf

- https://codex.vlaanderen.be/Portals/Codex/documenten/1006276.html - http://www.auditvlaanderen.be/klokkenluiden-bij-de-vlaamse-overheid - http://www.lachambre.be/FLWB/PDF/54/2324/54K2324001.pdf - https://www.meldpuntsocialefraude.belgie.be/nl/index.html - http://fraudefootball.be/index-nl.html

Bulgaria • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 140 – 142, 185.

• Lauren Kierans, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Bulgaria (2013).

• Consulted website: - https://www.whistleblowers.org/storage/documents/Bulgaria/transparencyintbulg.pdf

78

Croatia • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 142 – 143,185 – 186.

• Blueprint for Free Speech, Briefing Paper. Whistleblower Protection in Croatia (2018). • Annex 11, Croatia to the EU Anti-Corruption Report, p. 11. • M. Worth, ‘Whistleblower Protection in Southeast Europe’ (2015), p. 23-24. • S. Laleta and V. Smokvina, in: G. Thüsing and G. Forst, ‘Whistleblowing – A Comparative

Study’, Springer (2016), p. 82-88. • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 38 – 40. • Consulted website:

- http://www.vsrh.hr/CustomPages/Static/HRV/Files/Legislation__Labour-Act.pdf - www.vsrh.hr/custompages/static/hrv/files/legislation__civil-obligations-act.doc

Cyprus • Blueprint for Free Speech, ‘Briefing Paper Whistleblower Protection in the EU, Cyprus

(2018). • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 144 – 145,186.

• Constantinos Kombos, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Cyprus (2012).

• G. Thüsing and G. Forst, ‘Whistleblowing – A Comparative Study’, Springer (2016), p. 109. • Consulted websites

- http://www.cylaw.org/nomoi/arith/2004_3_007.pdf - https://anticorruption.police.gov.cy/police/platform/platform.nsf/subscribe_en/subscrib

e_en?OpenForm - http://www.ionasnicolaou.eu/Media/Attachments/2017/Nomosxedio_gia_Metra_Prost

asias_Pliroforiodoti.docx

Czech Republic • Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Czech

Republic’. • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 145-146,186.

• Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Czech Republic (2013).

• World Law Group, Global Guide to Whistleblowing Programs (2016), p. 41 – 43. Denmark • Blueprint for Free Speech, ‘Briefing Paper Whistleblower Protection in the EU, Denmark’. • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 146 – 148,187.

79

• Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 78 – 80. • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 44 – 49. • Consulted websites:

- https://www.iuslaboris.com/en-gb/resources/insights/a/denmark-proposed-directive-protection-whistleblowers/

- https://www.changeofdirection.eu/assets/briefings/EU%20briefing%20paper%20-%20Denmark%20-%20english.pdf

Estonia • Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Estonia’

(2018). • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 148 – 149,187.

• Transparency International Estonia, ‘Whistleblower Protection Assessment Report on Estonia’ (2009).

• Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Estonia (2013).

• Consulted website: - https://www.asktheeu.org/en/request/994/response/5854/attach/html/9/Country%20re

port%20Estonia.pdf.html Finland • Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Finland’

(2018). • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 149 – 150,187 – 188.

• Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 81 – 84. • OECD, ‘Implementing the OECD Anti-Bribery Convention, Phase 4 report: Finland’ (2017). • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 57 – 59. France • Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, France,

(2018). • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 151 – 152,188.

• Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 85 – 89. • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 60 – 63. • Consulted website:

- http://www.osborneclarke.com/insights/whistleblowing-a-new-regulation-in-france-in-january-2018/

80

Germany • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 152 – 153,188 – 189.

• Consulted websites: - https://www.whistleblower-net.de/pdf/WB_in_Germany.pdf - https://www.globalworkplaceinsider.com/2014/05/whistleblowing-what-protection-do-

employees-have-in-germany/ - http://www.cms-lawnow.com/ealerts/2017/03/federal-financial-supervisory-authoritys-

central-contact-point-for-whistleblowers - https://globalcompliancenews.com/germany-whistleblowing-hotlines-20180822/

Greece • Blueprint for Free Speech, ‘Gaps in the System: Whistleblower Laws in the EU, page 30. • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 154-155,189.

• OECD, Whistleblower Protection in the Private Sector: Developing the Legal Framework, (2018).

• Transparency International Greece, ‘Providing an Alternative to Silence. Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Greece’ (2013).

• Consulted websites: - https://www.lexology.com/navigator#!results/290/view - https://whistleb.se/whistleblowing-greece/

Hungary • Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Hungary’

(2018). • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 155-157,189 – 190.

• Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 93 – 96.

Ireland • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 157 – 159,190.

• Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 97 – 101. • OECD, Committing to Effective Whistleblower Protection, (OECD Publishing: 2016), p. 171

– 180. • Transparency International Ireland, ‘Speak Up Safely. TI-Ireland’s Guide to Whistleblowing

and Making a Protected Disclosure ’(2014). • World Law Group, Global Guide to Whistleblowing Programs, (2016), p. 83 – 85. • Consulted websites:

- http://www.irishstatutebook.ie/eli/2014/act/14/section/11/enacted/en/html#sec11

81

- http://www.citizensinformation.ie/en/employment/enforcement_and_redress/protection_for_whistleblowers.html

Italy • Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Italy’. • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 159 – 160,190 – 191.

• Consulted websites: - https://www.nctm.it/en/news/articles/models-231-and-privacy-in-light-of-the-new-

provisions-on-whistleblowing - https://www.unodc.org/documents/treaties/UNCAC/WorkingGroups/workinggroup4/20

14-September-8-10/Responses_NV/Italy_EN.pdf Latvia • Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Latvia’. • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 160 – 161, 191.

• Consulted website: - http://www.ilo.org/dyn/natlex/natlex4.detail?p_lang=en&p_isn=60599

Lithuania • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 162 – 164,191.

• Transparency International Lithuania, Whistleblower Protection Assessment. Country Report Lithuania’ (2009).

• Transparency International, ‘Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country Report: Lithuania’ (2013).

Luxembourg • Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU,

Luxembourg’ (2018). • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 164 – 165, 192.

• Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 108 – 110. • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 95 – 99. • Consulted websites:

- https://www.whistleblower-rights.org/whistleblower-protection-laws-3/. - http://www.labourlawnetwork.eu/national_labour_law/national_legislation/legislative_d

evelopments/prm/109/v__detail/id__1403/category__22/index.html

82

- https://www.lexology.com/library/detail.aspx?g=34ba0e2f-4229-4bcf-be8b-bda56b117598

- https://www.wildgen.lu/our-insights/article/whistleblowing-luxembourg Malta • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 165 – 168, 192.

• Consulted website: - https://www.whistleblower-rights.org/whistleblower-protection-laws/.

Netherlands • Wet Huis voor Klokkenluiders, 01-07-2016 • Authority for Whistleblowers • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 168 – 169, 192 – 193.

• Consulted websites: - https://www.whistleblower-rights.org/whistleblower-protection-laws/. - https://wetten.overheid.nl/BWBR0037852/2016-07-01/ - https://huisvoorklokkenluiders.nl/whistleblowers-authority-publications/

Poland • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 169 – 171, 193.

• Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 118 – 120. • Providing an Alternative to Silence: Towards Greater Protection and Support for

Whistleblowers in the EU. Country Report: Poland’ (2012). • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 136 – 140.

Portugal • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 171 – 172.

• Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 121 – 123. • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 141 – 143. • Consulted website:

- http://ec.europa.eu/regional_policy/sources/conferences/anti_corruption/lisbon/whistleblowing_marques.pdf

Romania • Blueprint for Free Speech, ‘Whistleblower Protection in Southeast Europe. An Overview of

Laws, Practice and Recent Initiatives’ (2015), p. 55.

83

• European Commission, Proposal for a Directive of the European Parliament and of the Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 172 – 173, 193.

• Consulted websites: - https://www.whistleblower-rights.org/whistleblower-protection-laws-3/ - http://www.whistleblowing.it/Romanian%20Law%20571-2004%20-

%20whistleblowingEN.pdf Slovakia • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 173 – 175, 194 – 195.

• World Law Group, Global Guide to Whistleblowing Programs (2016), p. 151 – 154. • Consulted websites:

- https://www.whistleblower-rights.org/whistleblower-protection-laws-3/

Slovenia • Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Slovenia’

(2018). • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 175 – 177, 195.

• Transparency International, Providing an Alternative to Silence: Towards Greater Protection and Support for Whistleblowers in the EU. Country report: Slovenia, (2013).

• Linklaters, Whistleblowing: the European Landscape’, (PowerPoint), page 3. • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 155 – 158. • Consulted websites:

- http://www.regulatelobbying.com/images/Slovenia_Lobbying_Law-3.pdf - https://www.transparency.si/images/publikacije/Whistleblowing_Slovenia.pdf

Spain • Blueprint for Free Speech, ‘Briefing Paper – Whistleblower Protection in the EU, Spain’

(2018). • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 177 – 179, 195.

• Linklaters, ‘Whistleblowing: the European Landscape’ (PowerPoint), page 3. • Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 127 – 130. • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 165 – 167. • Consulted websites:

- https://transparencia.org.es/wp-content/uploads/2017/04/position_paper_proteccion_denunciantes.pdf

84

Sweden • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 179 – 181, 195 – 196.

• Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 131 – 133. • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 168 – 170. • Consulted websites:

- https://www.government.se/4a9faa/contentassets/8eaf2765387e4c18940baee2ca4d461c/sfs-2016749-act-on-special-protection-for-workers-against-reprisals-for-whistleblowing-concerning-serious-irregularities

- https://www.lexology.com/library/detail.aspx?g=0e67ed39-9850-4f71-8f47-b7c091325e67

United Kingdom • European Commission, Proposal for a Directive of the European Parliament and of the

Council, on the protection of persons reporting on breaches of Union Law, COM/2018/218 final – 2018/0106 (COD), annex 6: Member States’ legislative framework, p. 182 – 183, 196.

• Norton Rose Fulbright, A global guide to whistleblowing laws (2014), p. 137 – 139. • World Law Group, Global Guide to Whistleblowing Programs (2016), p. 190 – 194. • Consulted websites:

- https://www.gov.uk/government/publications/the-public-interest-disclosure-act - https://www.gov.uk/whistleblowing - https://www.gov.uk/whistleblowing/who-to-tell-what-to-expect - https://www.gov.uk/whistleblowing/treated-unfairly-after-whistleblowing - https://www.gov.uk/browse/working/redundancies-dismissals

85

ANNEX 4 – ACKNOWLEDGEMENTS This research has been realised with the assistance of several national experts from the researched EU member states. The majority of these national experts are connected to the national chapter of Transparency International in the relevant EU member state. Consulted member state experts • Belgium: Hanneke de Visser – Transparency International Belgium • Bulgaria: Ecaterina Camenscic – Transparency International Bulgaria • Cyprus: Maria Konstantinou – Transparency International Cyprus • Czech Republic: Apolena Ondráčková – Transparency International Czech Republic • Denmark: Marina Buch Kristensen – Transparency International Denmark • France: Nicole-Marie Meyer – Transparency International France • Ireland: Judy O’Loan – Transparency International Ireland • Italy: Giorgio Fraschini – Transparency International Italy • Latvia: Janis Veide – Transparency International Latvia • Malta: Tina Urso – journalist & anti-corruption activist • Netherlands: Lotte Rooijendijk – Transparency International Nederland • Portugal: João Paulo Batalha – Transparency International Portugal • Slovakia: Oliver Fecsu – Transparency International Slovakia • Slovenia: Alma Sedlar – Transparency International Slovenia • Spain: David Martínez García – Transparency International Spain